RepoJournal
Go

@golang

Go and the standard library - backend infrastructure at scale

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

GOPLS SANDBOX GETS EMERGENCY STABILITY FIX AS PLAYGROUND OVERHAULS DEPLOYMENT

By RepoJournal · Filed · About Go

The playground sandbox can no longer hang on container timeouts, and gopls is cleaning up internal linkname hacks that were recipes for trouble.

The playground sandbox now closes its pipe writer when containers timeout or exit, unblocking pending reads that were causing the entire process to hang [1]. This is paired with a broader sandbox modernization: Docker installation now uses the official apt repository instead of deprecated utilities, the Makefile supports dynamic image tags, and Container-Optimized OS deployments have switched from the defunct gce-container-declaration (Konlet) metadata to native systemd services [2] [3]. On the tools side, gopls is eliminating technical debt by inverting the import relationship between typesinternal and typeutil, removing the linkname hack that was a vulnerability vector and simplifying ForEachElement to eliminate the TypeMap dependency [4]. The semantic tokens implementation got two coordinated fixes: gopls now respects client capabilities for token types and modifiers [5], with release notes properly documented [6]. Smaller but important: the embedlit modernizer no longer introduces syntax errors on multi-assignment initializations [7], freesymbols switched to html/template to eliminate escaping mistakes [8], and the dns/dnsmessage parser added boundary checks to prevent out-of-bounds reads on malformed SVCB records [9].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] sandbox: prevent startContainer from hanging on timeout golang/playground
  2. [2] sandbox: parameterize image tags and update docker install golang/playground
  3. [3] sandbox: replace deprecated Konlet with systemd service in cloud-init golang/playground
  4. [4] internal/typesinternal: avoid linkname hacks golang/tools
  5. [5] gopls: respect client capabilities for semtok enabled tokens and mods golang/tools
  6. [6] gopls/doc/release: semtok ClientCapabilities change release notes golang/tools
  7. [7] go/analysis/passes/modernize: embedlit - skip multi assigns and decls golang/tools
  8. [8] gopls/internal/golang: freesymbols: use html/template golang/tools
  9. [9] dns/dnsmessage: add boundary check in unpackSVCBResource golang/net

Quick answers

What shipped in Go on July 11, 2026?
The playground sandbox can no longer hang on container timeouts, and gopls is cleaning up internal linkname hacks that were recipes for trouble. In total, 15 commits landed.
Who contributed to Go on July 11, 2026?
8 developers shipped this update, including Alan Donovan, Alex Putman, Madeline Kalil, Damien Neil, harjoth, Hana Kim, ismailshadow, and Gopher Robot.
What were the notable Go updates?
sandbox: prevent startContainer from hanging on timeout, sandbox: parameterize image tags and update docker install, and sandbox: replace deprecated Konlet with systemd service in cloud-init.

More from @golang

Daily updates, in your inbox

Follow Go

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.