RepoJournal
Go

@golang

Go and the standard library — backend infrastructure at scale

Pick a date

  1. Thu 21 may
  2. Sat 23 may
  3. Tue 26 may
  4. Wed 27 may
  5. Thu 28 may
  6. Fri 29 may
  7. Sat 30 may
  8. Sun 31 may
  9. Mon 8 jun
  10. Tue 9 jun
  11. Wed 10 jun
  12. Thu 11 jun
  13. Fri 12 jun
  14. Sat 13 jun
  15. Sun 14 jun
  16. Tue 16 jun
  17. Wed 17 jun
  18. Thu 18 jun
  19. Fri 19 jun
  20. Sat 27 jun
  21. Sun 28 jun
  22. Tue 30 jun
  23. Wed 1 jul
  24. Thu 2 jul
  25. Fri 3 jul
  26. Tue 7 jul
  27. Wed 8 jul
  28. Thu 9 jul
  29. Fri 10 jul
  30. Today 11 jul

The Wire · Showcase

GOPLS SANDBOX GETS EMERGENCY STABILITY FIX AS PLAYGROUND OVERHAULS DEPLOYMENT

By RepoJournal · Filed · About Go

Alan Donovan Alex Putman Madeline Kalil Damien Neil harjoth Hana Kim ismailshadow +1
8 people shipped this

The playground sandbox can no longer hang on container timeouts, and gopls is cleaning up internal linkname hacks that were recipes for trouble.

The playground sandbox now closes its pipe writer when containers timeout or exit, unblocking pending reads that were causing the entire process to hang [1]. This is paired with a broader sandbox modernization: Docker installation now uses the official apt repository instead of deprecated utilities, the Makefile supports dynamic image tags, and Container-Optimized OS deployments have switched from the defunct gce-container-declaration (Konlet) metadata to native systemd services [2] [3]. On the tools side, gopls is eliminating technical debt by inverting the import relationship between typesinternal and typeutil, removing the linkname hack that was a vulnerability vector and simplifying ForEachElement to eliminate the TypeMap dependency [4]. The semantic tokens implementation got two coordinated fixes: gopls now respects client capabilities for token types and modifiers [5], with release notes properly documented [6]. Smaller but important: the embedlit modernizer no longer introduces syntax errors on multi-assignment initializations [7], freesymbols switched to html/template to eliminate escaping mistakes [8], and the dns/dnsmessage parser added boundary checks to prevent out-of-bounds reads on malformed SVCB records [9].

Action items

References

  1. [1] sandbox: prevent startContainer from hanging on timeout golang/playground
  2. [2] sandbox: parameterize image tags and update docker install golang/playground
  3. [3] sandbox: replace deprecated Konlet with systemd service in cloud-init golang/playground
  4. [4] internal/typesinternal: avoid linkname hacks golang/tools
  5. [5] gopls: respect client capabilities for semtok enabled tokens and mods golang/tools
  6. [6] gopls/doc/release: semtok ClientCapabilities change release notes golang/tools
  7. [7] go/analysis/passes/modernize: embedlit - skip multi assigns and decls golang/tools
  8. [8] gopls/internal/golang: freesymbols: use html/template golang/tools
  9. [9] dns/dnsmessage: add boundary check in unpackSVCBResource golang/net

More from @golang

Go @golang

GOPLS V0.23.0 SHIPS AS GO TOOLCHAIN FIXES PLAN 9 COMPATIBILITY

gopls 0.23.0 landed overnight while the Go core team fixes a Plan 9 regression in file removal that could break deployments on legacy systems.

go 17 shipped 1-min read
Go @golang

GOPLS ASSEMBLY SUPPORT LANDS, GODEP REFRESH ROLLS ACROSS ECOSYSTEM

The Go toolchain just got smarter about assembly files, and a coordinated dependency update is rolling through every major repo simultaneously.

go 10 shipped 1-min read
Go @golang

VULNDB INGESTS 86 NEW VULNERABILITY REPORTS OVERNIGHT

The vulnerability database shipped 86 new security advisories in four separate CLs, covering first-party Go issues and third-party dependency vulnerabilities that your supply chain scanner needs to know about.

go 16 shipped 1-min read
Go @golang

GOPLS CLEARS PROTOCOL CLUTTER WHILE TOOLS CHAIN TACKLES MODULE MODERNIZATION

gopls shipped a cleanup that removes hand-written protocol overrides, clearing technical debt just as the modernize analyzer gains new teeth to strip obsolete import comments from module-based Go code.

go 10 shipped 1-min read

Daily updates, in your inbox

Follow Go

Go and the standard library — backend infrastructure at scale We'll email you a link to confirm first.

Free. Confirm via email. Unsubscribe in one click.

— or follow the whole beat:

Elsewhere on the wire

Elixir & Phoenix Elixir & Phoenix

ELIXIR FIXES TIME MATH BUG THAT ROUNDS THE WRONG WAY

NaiveDateTime.diff/3 has been silently rounding elapsed time up instead of down, breaking its documented contract and potentially causing logic errors in any code relying on time-based calculations.

Alexander Gubarev nseaSeb Łukasz Samson SteffenDE
elixir 35 shipped 1-min read
.NET @dotnet

OPERATOR SDK 13.0 BREAKS CONTROLLER ARCHITECTURE, ANDROID TESTS GO LOCAL

The dotnet-operator-sdk ships a major breaking change that fundamentally rewrites how multiple controllers target the same entity, while the Android team closes external test dependencies to fix certificate export failures on macOS.

github-actions[bot] kimpenhaus renovate Weihan Li +7
dotnet 40 shipped 2-min read
Spring @spring-projects

SPRING INTEGRATION FIXES CRITICAL LOCK REGISTRY BUG BLOCKING DISTRIBUTED SYSTEMS

Spring Integration shipped an emergency fix for JdbcLockRegistry that was causing false application hangs when different keys collided on shared locks.

dependabot artembilan Oliver Drotbohm
java 10 shipped 1-min read
FastAPI & Pydantic FastAPI & Pydantic

PYDANTIC ADDS VALIDATION ERROR TROUBLESHOOTING GUIDE

Pydantic just shipped a troubleshooting guide that walks you through reading validation failures in Logfire traces, cutting your debugging time in half.

strawgate
python 2 shipped 1-min read