What were the notable Go updates?

acme/autocert: fix data race in Manager.createCert, gopls/internal/telemetry: skip the telemetry test on Plan 9, and internal/diff: use ape/patch and ape/diff on Plan 9.

@golang

Go and the standard library - backend infrastructure at scale

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

GOLANG PATCHES CRYPTO RACE, TOOLS FIXES PLAN 9 COMPATIBILITY

By RepoJournal · Filed 06:01 UTC on June 27, 2026 · About Go

Go's crypto/autocert library ships a critical data race fix while the tools team systematically hardens Plan 9 support across gopls and the standard library.

The most pressing fix landed in golang/crypto: Manager.createCert() had a classic data race where concurrent goroutines for the same domain were reading state.locked without holding a lock [1]. This is the kind of bug that only surfaces under load and causes mysterious production failures. The fix removes the racy field entirely and computes ownership state under proper synchronization. Meanwhile, golang/tools is in heavy cleanup mode for Plan 9. gopls/internal/telemetry now skips tests that depend on memory-mapped files, which Plan 9 doesn't support [2]. The internal/diff package swapped out Plan 9's incompatible diff command for ape/diff from the POSIX compatibility layer [3]. These aren't edge-case fixes: Plan 9 is a tier-1 platform for Go, and every test failure compounds. Over in golang/text, unicode/norm hit an infinite loop bug when processing invalid input because the character size could be zero [4]. The fix changes how the package reports invalid characters so downstream code doesn't have to check for zero-width characters everywhere. golang/go also shipped a TLS privacy hardening: ECH (Encrypted Client Hello) will no longer include the PSK extension in the outer hello, preventing attackers from harvesting and replaying outer client hellos [5]. None of these are flashy features, but they're exactly the kind of fixes that prevent 3 AM pages.

Action items

→ Review crypto/autocert changes if you use autocert in production golang/crypto [plan]
→ If you maintain Plan 9 builds of Go tools, pull golang/tools updates golang/tools [plan]
→ Monitor unicode/norm for potential input handling edge cases in your codebase golang/text [monitor]

References

[1] acme/autocert: fix data race in Manager.createCert golang/crypto
[2] gopls/internal/telemetry: skip the telemetry test on Plan 9 golang/tools
[3] internal/diff: use ape/patch and ape/diff on Plan 9 golang/tools
[4] unicode/norm: avoid infinite loop on invalid input golang/text
[5] crypto/tls: omit PSK in ECH outer client hello golang/go

Quick answers

What shipped in Go on June 27, 2026?: Go's crypto/autocert library ships a critical data race fix while the tools team systematically hardens Plan 9 support across gopls and the standard library. In total, 11 commits landed.
What were the notable Go updates?: acme/autocert: fix data race in Manager.createCert, gopls/internal/telemetry: skip the telemetry test on Plan 9, and internal/diff: use ape/patch and ape/diff on Plan 9.

COMPILER GETS SMARTER ABOUT FUNCTION ORDERING, BENCHMARK SUITE HITS BUILD SNAGS

Go's compiler now counts IR nodes to order functions more intelligently, while the benchmark harness stumbles on recent upgrades.

go 4 shipped 1-min read

@golang 2 days ago

GO STRIPS MIPS REGISTER ALLOCATOR SUPPORT

Go's compiler is ripping out HI/LO register support for MIPS, closing the door on a decade of architectural complexity that wasn't worth the maintenance tax.

go 2 shipped 1-min read

@golang 3 days ago

PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26

The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.

go 13 shipped 1-min read

@golang 4 days ago

GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER

Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.

go 28 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.