RepoJournal
Go

@golang

Go and the standard library - backend infrastructure at scale

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

GO'S SYNC.ONCE PANIC TRAP

By RepoJournal · Filed · About Go

A panic in go/parser's ResolveFile can leave the compiler silently skipping type resolution, and Damien Neil is closing a request smuggling hole in net/http.

The go/parser bug [1] turns a panic into silent success: sync.Once marks the resolution done even when it panics, so later calls return normally without resolving the file. This is the kind of subtle correctness trap that bites in production, so watch for it in your code review. Meanwhile, net/http now closes connections when both Transfer-Encoding and Content-Length are present [2], following RFC 9112 to prevent request smuggling. That's a good reason to patch your servers. Peter Weinberger fixed a panic in gcimporter when writing export data for generic constant types [3], which could crash tools like go/packages. For your next Go upgrade, golang.org now runs Go 1.27 on App Engine [4], so plan accordingly.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] go/parser: preserve ResolveFile failure state after panic golang/go
  2. [2] net/http: close connection after handling req with TE and CL golang/go
  3. [3] internal/gcimporter: fix panic writing export data golang/tools
  4. [4] cmd/golangorg: update App Engine runtime to Go 1.27 golang/website

Quick answers

What shipped in Go on August 21, 2026?
A panic in go/parser's ResolveFile can leave the compiler silently skipping type resolution, and Damien Neil is closing a request smuggling hole in net/http. In total, 13 commits landed.
Who contributed to Go on August 21, 2026?
8 developers shipped this update, including racequite, Damien Neil, Daniel Morsing, Peter Weinberger, Saleh, Hongxiang Jiang, Dmitri Shuralyov, and Gopher Robot.
What were the notable Go updates?
go/parser: preserve ResolveFile failure state after panic, net/http: close connection after handling req with TE and CL, and internal/gcimporter: fix panic writing export data.

More from @golang

Daily updates, in your inbox

Follow Go

Keep up with Go in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?