What were the notable Go updates?

net/http: apply header timeout to server's unencrypted HTTP/2 check, Revert "cmd/compile: speedup large init function compile time", and cmd/compile: fix misscompile in rewrite generic rules.

@golang

Go and the standard library - backend infrastructure at scale

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

HTTP/2 TIMEOUT BUG PATCHED IN NET/HTTP, COMPILER CRASHES FIXED ACROSS STACK

By RepoJournal · Filed 06:01 UTC on July 1, 2026 · About Go

Go just plugged a timing hole in HTTP/2 preface detection that left connections exposed, while the compiler team cleaned up three separate miscompilation bugs that were crashing builds.

The net/http package was reading the HTTP/2 client preface from new connections with no timeout applied, a gap now closed by hoisting the header timeout into the server loop [1]. This matters because unencrypted HTTP/2 servers could hang indefinitely waiting for those initial bytes. Meanwhile, the compiler team reverted a recent init function optimization that broke variable initialization in synthetic functions [2], fixed a type canonicalization bug in shift operation rewrites that confirmed crashes [3], and patched simd emulation String methods that were entirely broken [4]. On the tooling side, gopls got two critical fixes: share objectpath.Encoder across type-checking batches to slash CPU usage from 22 seconds to 10.4 seconds [5], and detect testmain files without relying on GOCACHE to prevent spurious internal package errors [6]. The build infrastructure added metadata-based security comm fetching for RC releases [7], extending a pattern that's been working well in the two-minor-releases workflow.

Action items

→ Pull the HTTP/2 timeout fix [ref:1] before shipping any unencrypted HTTP/2 servers golang/go [immediate]
→ Sync compiler patches [ref:4] and [ref:5] immediately if you've hit init function crashes or shift operation miscompiles golang/go [immediate]
→ Update gopls to pick up the objectpath Encoder pooling [ref:8] and testmain detection fix [ref:9] golang/tools [plan]
→ Monitor the CNAME test change [ref:2] and simd String method repair [ref:3] in your test runs golang/go [monitor]

References

[1] net/http: apply header timeout to server's unencrypted HTTP/2 check golang/go
[2] Revert "cmd/compile: speedup large init function compile time" golang/go
[3] cmd/compile: fix misscompile in rewrite generic rules golang/go
[4] simd: repaired emulation String methods for simd golang/go
[5] gopls/internal/cache: share objectpath Encoder across batch golang/tools
[6] gopls/internal/cache: detect testmain without GOCACHE golang/tools
[7] cmd/relui: add metadata-based security comm fetching for RC releases golang/build
[8] net: fix TestLookupCNAME golang/go

Quick answers

What shipped in Go on July 1, 2026?: Go just plugged a timing hole in HTTP/2 preface detection that left connections exposed, while the compiler team cleaned up three separate miscompilation bugs that were crashing builds. In total, 13 commits landed.
What were the notable Go updates?: net/http: apply header timeout to server's unencrypted HTTP/2 check, Revert "cmd/compile: speedup large init function compile time", and cmd/compile: fix misscompile in rewrite generic rules.

COMPILER GETS SMARTER ABOUT FUNCTION ORDERING, BENCHMARK SUITE HITS BUILD SNAGS

Go's compiler now counts IR nodes to order functions more intelligently, while the benchmark harness stumbles on recent upgrades.

go 4 shipped 1-min read

@golang 2 days ago

GO STRIPS MIPS REGISTER ALLOCATOR SUPPORT

Go's compiler is ripping out HI/LO register support for MIPS, closing the door on a decade of architectural complexity that wasn't worth the maintenance tax.

go 2 shipped 1-min read

@golang 3 days ago

PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26

The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.

go 13 shipped 1-min read

@golang 4 days ago

GO REWORKS HTTP/3 REGISTRATION, KILLS GLOBAL STATE IN MODULE LOADER

Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.

go 28 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.