Topic · Go
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
HashiCorp
HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.
Read the wire →
Kubernetes
Kubernetes tackles the pod requeue bottleneck that's been choking large clusters, while user namespacing ships closer to production.
Read the wire →
Go
The printf linter stops falsely flagging intentional double newlines, while gotip now requires Go 1.26 to bootstrap.
Read the wire →
HashiCorp
Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.
Read the wire →
Kubernetes
Cluster-autoscaler shipped four patch releases across versions 1.33 through 1.36 fixing ProvisioningRequest condition application and Scaleway node detection, while Kubernetes core merged DRA node operations and volumeMount bind mount options.
Read the wire →
Go
Damien Neil's paired changes to net/http and x/net/http3 fundamentally reshape how HTTP/3 integrates with the standard library, while Michael Matloob strips out state manipulation functions that no longer belong anywhere.
Read the wire →
HashiCorp
Consul patches a critical WAN flood regression that was incorrectly treating failed members as alive during rejoin sequences.
Read the wire →
Kubernetes
Dynamic Resource Allocation fixed device accounting across its resource pool controller while cluster-autoscaler shipped maintenance releases across four versions.
Read the wire →
Go
A critical gopls bug that corrupted code when comments appeared in composite literals is fixed, while the vulnerability database absorbs a major batch of 46 new security reports across the ecosystem.
Read the wire →
HashiCorp
The AWS provider shipped three enhancement PRs overnight that expand infrastructure-as-code coverage for S3 Tables metadata properties and OpenSearch security configurations, while the docs team cleaned up deprecated tutorial collections and fixed formatting bugs across Vault and PKI documentation.
Read the wire →
Kubernetes
Three critical production fixes ship across core scheduler, metrics, and admission layers while DRA resource tracking stabilizes after surfacing a crash bug in the informer.
Read the wire →
Go
The Go compiler now frees unused registers at loop headers, cutting generated code size across all architectures, while the net package fixes a critical QUIC keep-alive deadlock that was burning CPU on blocked connections.
Read the wire →
HashiCorp
Terraform AWS provider is shipping Mail Manager integration alongside IPv6 bootstrap broker support for MSK clusters, expanding AWS service coverage as the provider continues aggressive expansion.
Read the wire →
Kubernetes
Google.golang.org/grpc v1.82.1 shipped with three security fixes, and Kubernetes is patching it everywhere at once: externaljwt, endpointslice, kube-scheduler, and dynamic-resource-allocation all landed the update overnight.
Read the wire →
Go
Go's compiler gets leaner while net/http fixes a decade-old proxy environment variable ambiguity that's finally caught up with the rest of the ecosystem.
Read the wire →
HashiCorp
A critical fix in the KubeVirt plugin removes a deadlock that was leaving Packer builds stuck waiting for DataVolumes that would never bind.
Read the wire →
Kubernetes
Dynamic Resource Allocation now handles fractional resource requests, while vSphere cloud provider rips out cryptographically weak MD5 hashing and patches critical CVEs.
Read the wire →
Go
The go command's cgo compiler version detection was running under -toolexec when it shouldn't have been, breaking builds for anyone wrapping their toolchain.
Read the wire →
HashiCorp
Both the Podman driver and Autoscaler projects published fresh nightly snapshots overnight, giving operators a chance to validate against unreleased features before they hit stable channels.
Read the wire →
Kubernetes
Three weeks of Azure e2e failures are fixed: kindnet pods can now reach the kube-apiserver, and StatefulSets get their long-awaited recreate update strategy.
Read the wire →
Go
gopls just locked down its LSP protocol with stronger enum typing, while the experimental track opens a new eval/trajectory module for advanced analysis workflows.
Read the wire →
