$ the-wire · showcase
ShiftAll* constants become immediate shifts on arm64
By RepoJournal · Filed · About Go · Composed from the cited sources · methodology
A compiler-convenience day: simdgen stops emitting a broadcast-and-VSSHL sequence for constant arm64 Neon shift-by-all, while net/rpc's security-policy status gets written down and a refactor of the checker's builtins lands in two steps.
simd/archsimd/_gen/simdgen: lower arm64 Neon ShiftAll* by a constant to immediate shifts golang/go
Constant-count ShiftAllLeft/ShiftAllRight on arm64 used to lower through MOVD, VMOV, VDUP and VSSHL, clamping the scalar count and broadcasting it into lane 0; the generator now emits an immediate shift directly. Variable counts still take the vector path, so the win is limited to call sites where the shift amount is a compile-time constant.
net/rpc: document security policy explicitly golang/go
The package doc now states outright that net/rpc falls outside the Go Security Policy, rather than leaving that implicit in its default use of encoding/gob. The commit message frames it as making an existing position explicit, so nothing changes at runtime: it changes what you can expect a CVE to cover.
data/reports: update GO-2026-5932 golang/vulndb
GO-2026-5932 now marks golang.org/x/crypto as fixed at the carve-out commit, the first module zip without openpgp, and lists golang.org/x/crypto/openpgp as affected at all versions. Filippo Valsorda's change follows openpgp being carved out of x/crypto and then deleted, so scanners built on the advisory database will now flag the standalone module instead of leaving the finding ambiguous.
go/types, types2: refactor builtins.go (step 1 of 2) golang/go
Step one of splitting Checker.builtins, over 1000 lines of shared argument handling plus a switch with one case per builtin, into a separate function per builtin, with argument processing handled by hand.
go/types, types2: remove vestiges of old builtin implementation (step 2 of 2) golang/go
Step two removes what was left of the old builtin implementation, so the go/types and types2 checkers now carry one code path where two had coexisted.
cmd/compile/internal/syntax: simplify invariants for source buffer read index golang/go
Also in the parser: source.r now holds the position of the most recently read character rather than the position after it, keeping it in sync with source.col and dropping a couple of subtractions, plus a switch for the slow error path and a factored-out copy call.
