$ tail -f topics/go.log
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
21 updates across 3 projects this week.
One calm review of what shipped across Go - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Go projects - refine anytime. · Read a sample issue →
Go
Go's x509 certificate verification just got exponentially faster for domains with large SAN lists, eliminating a pathological case that scaled by hostname labels times certificate entries.
read --wire →
HashiCorp
HashiCorp's Terraform Enterprise Go client unlocked atomic provider set management and registry provider lookup by ID, completing the API surface teams need for no-code infrastructure.
read --wire →
Kubernetes
Kubernetes is tearing down obsolete test infrastructure while shipping critical control plane upgrades and new conditional authorization capabilities.
read --wire →
Go
Go's SIMD experiment landed in master overnight, bringing new WebAssembly operations and compiler improvements that will ship in Go 1.27.
read --wire →
HashiCorp
HashiCorp shipped five separate PRs expanding terraform-provider-azurerm support across services S through W, while Packer's Amazon plugin fixes critical retry failures.
read --wire →
Kubernetes
Kubernetes 0.35.5 is propagating through core dependencies across node-problem-detector, cloud-provider-vsphere, and test infrastructure, along with a batch of routine security and testing updates.
read --wire →
Go
A single malformed packet from an SSH server crashes any Go client outright, while three separate stdlib bugs silently consume unbounded memory on corrupt input.
read --wire →
HashiCorp
Terraform Enterprise gains token TTL enforcement while Consul K8s ships its biggest breaking change yet, and three separate security updates patch Go vulnerabilities across the platform.
read --wire →
Kubernetes
Kops pushed its alpha Kubernetes versions to stable, signaling confidence in the latest release suite for production clusters.
read --wire →
HashiCorp
HashiCorp shipped major versions across Consul, Consul-K8s, and Consul Dataplane overnight, all patching the same cryptographic vulnerabilities that hit the Go ecosystem this spring.
read --wire →
Kubernetes
Japanese and Russian translations of core security documentation shipped overnight, while the platform infrastructure tightens with distroless base images and Go 1.27 compatibility fixes across the stack.
read --wire →
HashiCorp
Two critical reverts hit terraform-provider-google-beta overnight after recent commits broke test suites across multiple packages, while HashiCorp's Nomad ecosystem continues daily development snapshots.
read --wire →
Kubernetes
golang.org/x/crypto v0.52.0 is landing everywhere to silence security scanners, while Kubernetes optimizes CEL admission evaluation to cut CPU overhead on high-throughput clusters.
read --wire →
Go
The runtime/metrics package now has a test ensuring no stop-the-world pauses during Read calls, while the standard library patches a strconv output bug and fills gaps in S390X socket assembly exports.
read --wire →
HashiCorp
A critical boolean-to-string conversion flaw in the consul-k8s CLI is preventing users from deploying custom gateways with resource limits, fixed today across two merged PRs.
read --wire →
Kubernetes
Kubernetes is enforcing declarative validation across all clusters as the default behavior [ref:5], while kops streamlines its channels distribution by removing the standalone binary and moving to manifest-based deployment [ref:6].
read --wire →
Go
Go's runtime now splits mutex lock tracking from preemption disable, unblocking safe contention profiling while a major Zip64 writer bug gets patched.
read --wire →
HashiCorp
Consul's test suite just pulled in fixes for three high-severity container escape CVEs by jumping testcontainers-go five major versions, while the AWS cleanup script got a complete rewrite to handle IAM policy exhaustion.
read --wire →
Kubernetes
Descheduler images promoted to v0.36.0 across all architectures as cloud-provider-gcp hardens Unix socket permissions to block privilege escalation.
read --wire →
Go
Go is ripping out deprecated randomness controls from crypto/tls and cementing ML-KEM hybrid support as the forward path, signaling the end of an era of backwards compatibility knobs.
read --wire →
