RepoJournal
Go

@golang

Go and the standard library - backend infrastructure at scale

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Tue 16 jun
  2. Wed 17 jun
  3. Thu 18 jun
  4. Fri 19 jun
  5. Sat 27 jun
  6. Sun 28 jun
  7. Tue 30 jun
  8. Wed 1 jul
  9. Thu 2 jul
  10. Fri 3 jul
  11. Tue 7 jul
  12. Wed 8 jul
  13. Thu 9 jul
  14. Fri 10 jul
  15. Sat 11 jul
  16. Mon 13 jul
  17. Tue 14 jul
  18. Wed 15 jul
  19. Thu 16 jul
  20. Fri 17 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: Go Infrastructure Full archive →

The Wire · Showcase

GO 1.27 RELEASE CANDIDATE LANDS, VULNDB PLUGS TWO NEW HOLES

By RepoJournal · Filed · About Go

Go 1.27 RC1 is available now [ref:11], and the vulnerability database just sealed two fresh CVEs while patching an insufficient fix from last month [ref:1] [ref:2] [ref:3].

The toolchain is ready for testing [5], with stdlib indexes refreshed across the ecosystem. On the security front, the vulndb team added GO-2026-5062 and GO-2026-5061 in quick succession [2] [3], then backfilled a followup fix for GO-2026-4961 after the original patch proved insufficient [4]. This is typical hardening work ahead of the final release, so audit your dependencies now if you're on any of those affected versions. Meanwhile, the http package gained trailer validation to block header injection attacks [6], a breaking change that tightens HTTP/1 request and response handling. The compiler saw SIMD repairs [7], a PGO profile refresh [8], and Plan 9 environment inheritance fixes [9] to ensure testdata builds work everywhere. A typo fix in the types2 comment landed too [10], the kind of polish that accumulates across releases.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] dl: add go1.27rc1 golang/dl
  2. [2] data/reports: add GO-2026-5062 golang/vulndb
  3. [3] data/reports: add GO-2026-5061 golang/vulndb
  4. [4] data/reports: update fix version in GO-2026-4961 golang/vulndb
  5. [5] internal/stdlib: update stdlib index for Go 1.27 Release Candidate 1 golang/tools
  6. [6] net/http: validate trailers when writing requests and responses golang/go
  7. [7] simd: repair missed StorePart-returns-int in generated code golang/go
  8. [8] cmd/compile: update default PGO profile golang/go
  9. [9] simd: set GOEXPERIMENT in testdata tests golang/go
  10. [10] cmd/compile: fix typo in comment golang/go

Quick answers

What shipped in Go on June 19, 2026?
Go 1.27 RC1 is available now [ref:11], and the vulnerability database just sealed two fresh CVEs while patching an insufficient fix from last month [ref:1] [ref:2] [ref:3]. In total, 12 commits landed.
What were the notable Go updates?
dl: add go1.27rc1, data/reports: add GO-2026-5062, and data/reports: add GO-2026-5061.

More from @golang

Go @golang

COMPILER GETS SMARTER ABOUT FUNCTION ORDERING, BENCHMARK SUITE HITS BUILD SNAGS

Go's compiler now counts IR nodes to order functions more intelligently, while the benchmark harness stumbles on recent upgrades.

Alan Donovan Jakub Ciolek Junyang Shao
go 4 shipped 1-min read
Go @golang

GO STRIPS MIPS REGISTER ALLOCATOR SUPPORT

Go's compiler is ripping out HI/LO register support for MIPS, closing the door on a decade of architectural complexity that wasn't worth the maintenance tax.

Jorropo
go 2 shipped 1-min read
Go @golang

PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26

The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.

cuishuang Alan Donovan Karthik Bhat Adyathimar Peter Weinberger +2
go 13 shipped 1-min read
Go @golang

GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER

Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.

Damien Neil Michael Matloob Ian Alexander Inada Naoki +6
go 28 shipped 1-min read

Daily updates, in your inbox

Follow Go

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.