Who contributed to Go on July 28, 2026?

8 developers shipped this update, including Egon Elbre, xiajun ni, dorbmon, Filippo Valsorda, Ahmed Mohamed, Ian Alexander, Chiman Jain, and Joel Sing.

What were the notable Go updates?

cmd/compile/internal/ssa: strip redundant byte/halfword zero-extensions on arm64, cmd/compile: initialize large static offsets dynamically, and strings, bytes: speed up TrimSpace for Unicode input.

@golang

Go and the standard library - backend infrastructure at scale

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

ARM64 COMPILER STRIPS REDUNDANT EXTENSIONS, VULNDB ADDS 41 NEW REPORTS

By RepoJournal · Filed 06:56 UTC on July 28, 2026 · About Go

8 people shipped this

Ian Alexander @jitsu-net 5 cited

Joel Sing @4a6f656c 2 cited

Egon Elbre @egonelbre 1 cited

xiajun ni @nixiajun886-coder 1 cited

dorbmon @Dorbmon 1 cited

Chiman Jain @chimanjain 1 cited

Filippo Valsorda @FiloSottile

Ahmed Mohamed @IBlackVoid

Go's ARM64 compiler now eliminates dead zero-extension instructions, cutting instruction count on tight loops while the vulnerability database absorbs a major backlog of security advisories.

Egon Elbre landed a compiler optimization [1] that strips redundant byte and halfword zero-extensions on ARM64, hitting a common pattern in scanners and table lookups where narrow loads get extended multiple times. The fix targets a real performance gap: when a zero-extended narrow load has multiple consumers, late lowering was creating dead MOVDreg instructions that only got elided on single-use loads. Xiajun Ni fixed a compiler crash [2] where static initialization could send offsets larger than 1 GiB to the object writer, moving oversized values to dynamic initialization instead. Meanwhile, Dorbmon accelerated TrimSpace [3] by skipping the generic TrimFunc fallback for Unicode input and using dedicated helpers backed by a Unicode whitespace predicate. On the security front, vulndb absorbed a backlog of 41 new vulnerability reports [4], [5], [6], [7] across multiple Go packages, while also reviewing and updating existing entries [8]. VSCode-Go bumped gofumpt from v0.7.0 to v0.10.0 [9] with fallback logic for older Go versions. In the arch repo, Joel Sing fixed a goroutine deadlock in the disassembler test suite [10] and switched ARM64 objdump tests to llvm-objdump on OpenBSD [11] where GNU objdump is outdated.

Action items

→ Review vulndb updates if you maintain packages affected by GO-2026-* advisories golang/vulndb [plan]
→ Update gofumpt to v0.10.0 in VSCode-Go if you require Go 1.25+ golang/vscode-go [plan]
→ Test ARM64 compiler with heavy string operations to validate zero-extension stripping golang/go [monitor]

References

[1] cmd/compile/internal/ssa: strip redundant byte/halfword zero-extensions on arm64 golang/go
[2] cmd/compile: initialize large static offsets dynamically golang/go
[3] strings, bytes: speed up TrimSpace for Unicode input golang/go
[4] data/reports: add 2 reports golang/vulndb
[5] data/reports: add 6 reports golang/vulndb
[6] data/reports: add 28 reports golang/vulndb
[7] data/reports: add 5 reports golang/vulndb
[8] data/reports: review GO-2026-5617 golang/vulndb
[9] src/goInstallTools: update default gofumpt version golang/vscode-go
[10] all: avoid a goroutine deadlock on disassembler error golang/arch
[11] arm64/arm64asm: use llvm-objdump for objdump tests on openbsd golang/arch

Quick answers

What shipped in Go on July 28, 2026?: Go's ARM64 compiler now eliminates dead zero-extension instructions, cutting instruction count on tight loops while the vulnerability database absorbs a major backlog of security advisories. In total, 20 commits landed.
Who contributed to Go on July 28, 2026?: 8 developers shipped this update, including Egon Elbre, xiajun ni, dorbmon, Filippo Valsorda, Ahmed Mohamed, Ian Alexander, Chiman Jain, and Joel Sing.
What were the notable Go updates?: cmd/compile/internal/ssa: strip redundant byte/halfword zero-extensions on arm64, cmd/compile: initialize large static offsets dynamically, and strings, bytes: speed up TrimSpace for Unicode input.

CRYPTO/TLS PATCHES KEYUPDATE DOS, COMPILER FIXES TIME-TRAVELING PROOFS

Go shipped a critical fix for a denial-of-service vulnerability in TLS handshake handling that allowed malicious clients to force infinite key derivation operations on servers.

go 10 shipped 1-min read

@golang 2 days ago

COMPILER GETS SMARTER ABOUT FUNCTION ORDERING, BENCHMARK SUITE HITS BUILD SNAGS

Go's compiler now counts IR nodes to order functions more intelligently, while the benchmark harness stumbles on recent upgrades.

go 4 shipped 1-min read

@golang 3 days ago

GO STRIPS MIPS REGISTER ALLOCATOR SUPPORT

Go's compiler is ripping out HI/LO register support for MIPS, closing the door on a decade of architectural complexity that wasn't worth the maintenance tax.

go 2 shipped 1-min read

@golang 4 days ago

PRINTF ANALYZER GETS SMARTER, PLAYGROUND NEEDS GO 1.26

The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.

go 13 shipped 1-min read

Elsewhere on the wire

AI Agents about 3 hours ago

LANGCHAIN CORES SHIP, ANTHROPIC THINKING BLOCKS FIXED, OPENHANDS TIGHTENS WEBSOCKET AUTH

LangChain released two core packages with critical fixes for streaming stability and environment variable handling, while OpenHands closed a security gap that left WebSocket connections unprotected.

ai-agents 119 shipped 1-min read

Local LLMs about 3 hours ago

OLLAMA RIPS OUT IMAGE GENERATION, LLAMA.CPP SHIPS SPECULATIVE DECODING

Ollama removed its entire MLX image generation pipeline overnight, while llama.cpp landed DSpark speculative decoding and fixed a critical SYCL memory bug affecting Arc GPUs.

+11

llms 239 shipped 2-min read

@CachyOS about 3 hours ago

KERNEL SCHEDULER UPDATES ACROSS BORE AND SCX TOOLING

CachyOS shipped BORE 6.8.0 patches across two kernel series while upgrading its sched-ext ecosystem in parallel, signaling major tuning work ahead.

infra 83 shipped 1-min read

Elixir & Phoenix about 3 hours ago

ELIXIR TIGHTENS ERROR HANDLING ACROSS DATE, ECTO, AND IEXHELPERS

Date.range now surfaces ArgumentError instead of Protocol.UndefinedError when passed invalid step values, catching a class of bugs that silently fail in production code.