RepoJournal
Go

@golang

Go and the standard library - backend infrastructure at scale

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Thu 16 jul
  2. Fri 17 jul
  3. Sat 18 jul
  4. Sun 19 jul
  5. Mon 20 jul
  6. Tue 21 jul
  7. Wed 22 jul
  8. Thu 23 jul
  9. Fri 24 jul
  10. Sat 25 jul
  11. Sun 26 jul
  12. Mon 27 jul
  13. Tue 28 jul
  14. Wed 29 jul
  15. Thu 30 jul
  16. Fri 31 jul
  17. Sat 1 aug
  18. Mon 3 aug
  19. Tue 4 aug
  20. Wed 5 aug
  21. Thu 6 aug
  22. Fri 7 aug
  23. Sat 8 aug
  24. Sun 9 aug
  25. Tue 11 aug
  26. Wed 12 aug
  27. Thu 13 aug
  28. Fri 14 aug
  29. Sat 15 aug
  30. Today 16 aug
Topics: Go Infrastructure Full archive →

The Wire · Showcase

GO STRIPS LEGACY CODE.GOOGLE.COM PATHS, HTTP/2 HOST HEADER FIX LANDS

By RepoJournal · Filed · About Go

Hongxiang Jiang cuishuang Ilya Torbin Damien Neil Carlos Amedee Michael Matloob Rhys Hiltner
9 people shipped this
Hongxiang Jiang @h9jiang 2 cited cuishuang @cuishuang 2 cited Ilya Torbin @bontail 1 cited Damien Neil @neild 1 cited Carlos Amedee @cagedmantis 1 cited Michael Matloob @matloob Rhys Hiltner @rhysh Ruixi-rebirth @Ruixi-rebirth racequite @racequite

The Go toolchain removed an unreachable staleness check dating to Google Code's 2016 shutdown, while the HTTP/2 implementation now correctly strips Host headers from request maps to match documented behavior.

cmd/go/internal/load dropped the StalePath check [1] that reported errors for code.google.com/p/go.tools imports, a path that became unfetchable the moment Google Code shut down eight years ago. The removal closes an old TODO in the loader. Meanwhile, net/http/internal/httpcommon [2] fixed a behavioral gap: the http.Request documentation promises that incoming Host headers are promoted to the Request.Host field and removed from the Header map, but HTTP/2 was keeping them in the map when no :authority pseudo-header arrived. This change aligns implementation with spec. On the analyzer front, golang/tools patched two widespread bugs across its static checkers. The modernize pass [5] now refuses to rewrite backward slice loops with assignment-form initialization (i = len(s)-1), since converting to a range loop would declare a new variable and change post-loop behavior. More broadly, multiple analyzers [6] were panicking on multi-valued call arguments like net.Dial(dialArgs()), where one AST node represents two return values; the fix adds argument count checks before indexing. VS Code's Go extension [4] now prefers gopls' native implement-interface command over the external impl tool when available, part of a larger migration to built-in commands [3]. The build infrastructure also tightened buffer handling [7]: repeated buildlet connections no longer leak unread bytes that could corrupt subsequent reads from the network socket.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] cmd/go/internal/load: remove StalePath check golang/go
  2. [2] net/http/internal/httpcommon: remove Host header from server request golang/go
  3. [3] extension/src/goImpl: collect telemetry for the vscode command golang/vscode-go
  4. [4] extension/src/goimpl: use gopls command if available golang/vscode-go
  5. [5] go/analysis/passes/modernize: avoid changing assignment-form slicesbackward loops golang/tools
  6. [6] go/analysis: avoid panics on multi-valued call arguments golang/tools
  7. [7] buildlet: ensure bytes are drained before network connection golang/build

Quick answers

What shipped in Go on August 15, 2026?
The Go toolchain removed an unreachable staleness check dating to Google Code's 2016 shutdown, while the HTTP/2 implementation now correctly strips Host headers from request maps to match documented behavior. In total, 23 commits landed.
Who contributed to Go on August 15, 2026?
9 developers shipped this update, including Ilya Torbin, Damien Neil, Michael Matloob, Rhys Hiltner, Ruixi-rebirth, racequite, Hongxiang Jiang, and cuishuang, and 1 more.
What were the notable Go updates?
cmd/go/internal/load: remove StalePath check, net/http/internal/httpcommon: remove Host header from server request, and extension/src/goImpl: collect telemetry for the vscode command.

More from @golang

Go @golang

REFACTOR TOOL CRASH FIX SHIPS AS COMPILER INTERNALS SHUFFLE

The satisfy refactor tool stops crashing on type errors while the compiler team reorganizes global config across the SSA pipeline.

Peter Weinberger Michael Matloob
go 3 shipped
Go @golang

GO PATCHES TWO CRITICAL SUMDB VULNERABILITIES OVERNIGHT

The core team pulled in emergency fixes for authentication bypasses in module sum verification that could let attackers inject malicious hashes into the dependency chain.

Dmitri Shuralyov Ian Alexander Michael Pratt Carlos Amedee +6
go 22 shipped
Go @golang

GO COMMAND GETS PARALLEL TEST PARSING, COMPILER OPTIMIZATIONS CUT BINARY SIZE BY 10K INSTRUCTIONS

The Go team shipped three heavyweight optimizations overnight that speed up module loading for gopls and shrink binaries across every platform.

Guoqi Chen Jake Bailey cuishuang davidteather +6
go 19 shipped
Go @golang

GO AUTH CREDENTIALS FIXED, JSON V2 DROPS CYCLE GUARANTEE

A URL query parsing bug in cmd/go's credential matching gets fixed [ref:1], while the JSON encoder removes its cycle detection guarantee in v2 [ref:3].

cuishuang Ilya Torbin Michael Pratt Michael Matloob +7
go 39 shipped

Daily updates, in your inbox

Follow Go

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

OPENHANDS PINS CLIENT DEPENDENCY, ADDS STRUCTURED ERROR HANDLING

OpenHands locked its TypeScript client to exact version 1.37.0 and merged canvas error outcome improvements in a single commit cycle.

neubig
ai-agents 2 shipped
Local LLMs Local LLMs

LLAMA.CPP OVERHAULS INFERENCE FLAGS, VLLM PATCHES DEEPSEEK SPARSE MLA

llama.cpp deprecates mmap flags in favor of unified load-mode, while vllm fixes critical issues blocking DeepSeek-V4-Flash across all decode paths.

github-actions[bot] dhiltgen Fathi Boudra Eric Zhang +11
llms 136 shipped
CachyOS @CachyOS

DASHBOARD SEO OVERHAUL SHIPS AS PACKAGE TRAIN ROLLS FORWARD

CachyOS public-dashboard refactored routes with canonical metadata and improved crawler visibility [ref:18] while 61 commits across five repos kept the AUR pipeline humming.

github-actions witchlliee Jinra azdanov +1
infra 72 shipped
Elixir & Phoenix Elixir & Phoenix

ELIXIR CORE CUTS ALLOCATIONS ACROSS STRING AND AST OPERATIONS

Thomas Cioppettini landed four performance wins overnight that eliminate unnecessary allocations in List.myers_difference, String case conversion, and Macro tree walkers.

Thomas Cioppettini LostKobrakai
elixir 17 shipped
Want every project, not just this one?