RepoJournal
Go @golang
167 wires and counting

$ follow Go

Keep up with Go in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-12
stories 2
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

golang/crypto ssh accepts trailing banner data

By RepoJournal · Filed · About Go · Composed from the cited sources · methodology

Nicola Murino Gopher Robot
2 people shipped this
Nicola Murino @drakkan 1 cited Gopher Robot @gopherbot 1 cited

A one-line parser relaxation in golang/crypto's ssh package unblocks handshakes against servers that append bytes after the USERAUTH_BANNER language tag, while golang/exp does its routine refresh of golang.org/x dependencies.

ssh: accept trailing data in USERAUTH_BANNER messages golang/crypto

by Nicola Murino

The ssh client used to abort the handshake with "parse error in message type 53" when a server sent extra bytes after the banner's language tag, where OpenSSH tolerates them; it now ignores the trailing data so the banner still reaches BannerCallback. Truncated banners are still rejected, matching OpenSSH, and the commit carries a Fixes line for golang/go#81647.

go.mod: update golang.org/x dependencies golang/exp

by Gopher Robot

golang/exp's go.mod now points at the latest tagged releases of its golang.org/x dependencies, per Gopher Robot's auto-submitted commit. Nothing required of downstream users unless they vendor exp directly.

$ ls golang/reviews/ # the step-back reads

the week in review FIPS 140 crypto fixes land across SHA-3, TLS 1.2, HKDF the month in review Go toolchain patches three CVEs as gopls hits v0.24.0
Full archive → Weekly reviews →

Quick answers

What shipped in Go on October 12, 2026?
A one-line parser relaxation in golang/crypto's ssh package unblocks handshakes against servers that append bytes after the USERAUTH_BANNER language tag, while golang/exp does its routine refresh of golang.org/x dependencies. In total, 2 commits landed.
Who contributed to Go on October 12, 2026?
2 developers shipped this update, including Nicola Murino and Gopher Robot.
What were the notable Go updates?
ssh: accept trailing data in USERAUTH_BANNER messages and go.mod: update golang.org/x dependencies.
♥

$ log @golang --recent

RISC-V Zfa assembly support, and a faster archsimd unifier 9 shipped Plan 9 Mkdir race fixed, riscv64 gets clobberdead mode 7 shipped gopls closes a CVE on dash-prefixed module paths, and the exp collections get a Set 52 shipped Compiler stops lifting unsafe.Pointer arithmetic 35 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.