Go
HTTP/2 FLOW CONTROL VALIDATION HARDENS NET/HTTP, BUILD PIPELINE DROPS 1.19 COMPAT
Go's HTTP/2 implementation now validates server SETTINGS frames against stream flow limits, closing a potential vector for limit violations [ref:2].
read --wire →
$ tail -f topics/go.log
Go news, every morning.
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
21 updates across 3 projects this week.
Your week in Go, every Monday.
One calm review of what shipped across Go - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Go projects - refine anytime. · Read a sample issue →
Recent wires
HashiCorp
CONSUL SERVERS LOSE THEIR MINDS AFTER RENAME
A critical bug in Consul server rejoining after maintenance leaves clusters unable to find their Raft leader, breaking peer lookups and causing silent failures across production.
read --wire →
Kubernetes
NFTABLES BECOMES KUBE-PROXY DEFAULT, POD RESIZE GETS SCHEDULER PREEMPTION
Kubernetes is locking in its networking overhaul while shipping major scheduler and API surface enhancements for 1.37, signaling a fundamental shift in how the cluster routes traffic and scales workloads.
read --wire →
Go
GOPLS OVERHAULS FLAG PARSING, IMAGE LIBRARY PATCHES THREE SECURITY HOLES
gopls is enforcing strict flag ordering for subcommands [ref:2] while golang/image ships three separate security fixes addressing memory exhaustion and potential crashes in TIFF and WebP decoders [ref:14] [ref:15] [ref:16].
read --wire →
HashiCorp
PACKER KILLS EXTERNAL SBOM SCANNERS, EMBEDS SYFT NATIVELY
Packer's hcp-sbom provisioner just ditched the external binary dependency game and baked Syft directly into the build engine.
read --wire →
Kubernetes
APIMACHINERY 0.36.2 LANDS, AZURE CLOUD PROVIDER TESTS JUMP TO CAPZ MAIN
The core Kubernetes API machinery bumped a minor version while test infrastructure pivoted cloud-provider-azure's IPv6 and dual-stack jobs to an upstream fix not yet backported to release branches.
read --wire →
HashiCorp
NOMAD ECOSYSTEM CUTS NIGHTLY BUILDS ACROSS THREE CORE PROJECTS
HashiCorp's orchestration and autoscaling tools are now shipping daily development snapshots, giving operators a faster path to test unstable features before official release.
read --wire →
Kubernetes
KOPS FIXES CASCADING GCP RESOURCE DELETION BUG AS HEALTH CHECK RECONCILIATION LANDS
KOps shipped critical fixes for GCP backend service ownership filtering that was causing infinite delete loops when clusters coexist with GKE, while simultaneously landing health check reconciliation logic across both GCP and AWS.
read --wire →
Go
AMD64 COMPILER BUG FIXED AFTER MISSCOMPILATION REPORTS
The Go compiler shipped a critical fix for an AMD64 code generation bug that was producing incorrect conditional logic in compiled binaries.
read --wire →
HashiCorp
TERRAFORM GOOGLE PROVIDER LANDS APIGEE CREDENTIALS FIX AND NETWORK UPGRADES
The Terraform Google provider re-landed a critical Apigee feature that was reverted months ago, while simultaneously shipping network and artifact registry enhancements across both stable and beta channels.
read --wire →
Kubernetes
WATCHCACHE REFACTOR LANDS ALONGSIDE KOPS 1.36 BETA AND SERVICE NAME RELAXATION
The apiserver watchCache got a major internal refactor to fix concurrent mutation bugs, while kops shipped its first beta release of 1.36 and Kubernetes promoted relaxed service naming rules to GA.
read --wire →
Go
GO 1.27 RELEASE NOTES LOCKED IN AS COMPILER HARDENS AGAINST EDGE CASES
The Go website team is putting the final polish on 1.27 documentation while the compiler team squashes subtle bugs in SIMD transforms, Windows path handling, and generic method inference.
read --wire →
HashiCorp
TERRAFORM ENTERPRISE GETS SCIM SUPPORT AND POLICY DELEGATION
The terraform-provider-tfe v0.78.0 release ships SCIM provisioning and token management alongside a new project notification resource, giving enterprises tighter control over identity and governance.
read --wire →
Kubernetes
ETCD STREAMING LANDS IN APISERVER, KSM PATCHES CRITICAL GOLANG VULNS
Kubernetes apiserver is shipping etcd RangeStream support with proper metrics instrumentation, while kube-state-metrics dropped an emergency security release addressing high-severity Go vulnerabilities.
read --wire →
Go
GOLANG TIGHTENS GODEBUG ENFORCEMENT, COMPILER IMPROVES STRUCT LITERAL ERRORS
Go runtime now crashes at startup if you're still using a removed GODEBUG setting, forcing migration off deprecated flags before your code ships.
read --wire →
HashiCorp
TERRAFORM PROVIDER SURGE: AZURERM FIXES CRITICAL SQL MIGRATION, AWSCC SHIPS 35+ NEW RESOURCES
Azure's managed SQL instance now safely transitions between SKU tiers, while AWS CloudControl adds 35 new data sources and resources in a single release.
read --wire →
Kubernetes
KUBERNETES 1.37 ALPHA SHIPS AS CORE GAINS DECLARATIVE VALIDATION FRAMEWORK
The Kubernetes project is moving validation logic into API type definitions themselves, eliminating runtime panics and making it harder to ship broken schemas.
read --wire →
Go
TYPES RECEIVER BUG FIXED, ARM64 COMPILER ISSUES PATCHED
The Go compiler lands three critical fixes overnight while gopls gains generic interface support and VS Code extension v0.54.0 ships with interactive code actions.
read --wire →
HashiCorp
HASHICORP TIGHTENS DEPENDENCY CHAIN ACROSS PACKER AND TERRAFORM
The xz compression library got patched across Packer's VirtualBox and QEMU plugins overnight, while Terraform's AWS provider shipped startup error logging and Nomad docs went live.
read --wire →
Kubernetes
SECRET VALIDATION OVERHAUL SHIPS AS RELEASE-1.32 WINDS DOWN
Kubernetes API just migrated Secret type validation to declarative rules while the release team drops 1.32 config and hardens build infrastructure with Go and gcloud updates.
read --wire →