RepoJournal
Go @golang
118 wires and counting

$ follow Go

Keep up with Go in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-11
stories 15
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

GOPLS SANDBOX GETS EMERGENCY STABILITY FIX AS PLAYGROUND OVERHAULS DEPLOYMENT

By RepoJournal · Filed · About Go · Composed from the cited sources · methodology

Hana Kim Alan Donovan Alex Putman Madeline Kalil ismailshadow Damien Neil harjoth
8 people shipped this
Hana Kim @hyangah 3 cited Alan Donovan @adonovan 2 cited Alex Putman @aputman 2 cited Madeline Kalil @madelinekalil 1 cited ismailshadow @ISMAILSHADOW 1 cited Damien Neil @neild harjoth @harjothkhara Gopher Robot @gopherbot

The playground sandbox can no longer hang on container timeouts, and gopls is cleaning up internal linkname hacks that were recipes for trouble.

The playground sandbox now closes its pipe writer when containers timeout or exit, unblocking pending reads that were causing the entire process to hang [1]. This is paired with a broader sandbox modernization: Docker installation now uses the official apt repository instead of deprecated utilities, the Makefile supports dynamic image tags, and Container-Optimized OS deployments have switched from the defunct gce-container-declaration (Konlet) metadata to native systemd services [2] [3]. On the tools side, gopls is eliminating technical debt by inverting the import relationship between typesinternal and typeutil, removing the linkname hack that was a vulnerability vector and simplifying ForEachElement to eliminate the TypeMap dependency [4]. The semantic tokens implementation got two coordinated fixes: gopls now respects client capabilities for token types and modifiers [5], with release notes properly documented [6]. Smaller but important: the embedlit modernizer no longer introduces syntax errors on multi-assignment initializations [7], freesymbols switched to html/template to eliminate escaping mistakes [8], and the dns/dnsmessage parser added boundary checks to prevent out-of-bounds reads on malformed SVCB records [9].

Action items

References

  1. [1] sandbox: prevent startContainer from hanging on timeout ↗ golang/playground
  2. [2] sandbox: parameterize image tags and update docker install ↗ golang/playground
  3. [3] sandbox: replace deprecated Konlet with systemd service in cloud-init ↗ golang/playground
  4. [4] internal/typesinternal: avoid linkname hacks ↗ golang/tools
  5. [5] gopls: respect client capabilities for semtok enabled tokens and mods ↗ golang/tools
  6. [6] gopls/doc/release: semtok ClientCapabilities change release notes ↗ golang/tools
  7. [7] go/analysis/passes/modernize: embedlit - skip multi assigns and decls ↗ golang/tools
  8. [8] gopls/internal/golang: freesymbols: use html/template ↗ golang/tools
  9. [9] dns/dnsmessage: add boundary check in unpackSVCBResource ↗ golang/net

$ ls golang/reviews/ # the step-back reads

the week in review Go 1.27.1 lands as plan9 early export disabled the month in review Go compiler hardens binaries, crypto tightens SSH safety
Topics: Go Infrastructure Full archive → Weekly reviews →

Quick answers

What shipped in Go on July 11, 2026?
The playground sandbox can no longer hang on container timeouts, and gopls is cleaning up internal linkname hacks that were recipes for trouble. In total, 15 commits landed.
Who contributed to Go on July 11, 2026?
8 developers shipped this update, including Alan Donovan, Alex Putman, Madeline Kalil, Damien Neil, harjoth, Hana Kim, ismailshadow, and Gopher Robot.
What were the notable Go updates?
sandbox: prevent startContainer from hanging on timeout, sandbox: parameterize image tags and update docker install, and sandbox: replace deprecated Konlet with systemd service in cloud-init.
♥

$ log @golang --recent

Salsa20 gets a loong64 SIMD path 1 shipped LoongArch crypto gets SIMD, RISC-V bit tests slim down 9 shipped Go's QUIC stack learns to tell on-path from off-path, and amd64 gets v2/v3/v4 CPU bits 19 shipped pkgsite drops ctxhttp, tour returns real 404s 7 shipped

$ log --all # elsewhere on the wire

@open-webui Open WebUI 0.11.4 ships a slim image 89% smaller FastAPI & Pydantic SQLModel narrows SQLAlchemy type handling in Field, drops dataclass_transform shim

$ ls showcases/

Rails Django Laravel Node.js Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.