$ tail -f topics/go.log
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
21 updates across 3 projects this week.
One calm review of what shipped across Go - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Go projects - refine anytime. · Read a sample issue →
HashiCorp
Terraform provider for Vault now supports ephemeral token resources with type and entity_alias fields, while Nomad Autoscaler 0.5.0 introduces a new InfluxDB APM plugin for metrics collection.
read --wire →
Kubernetes
Windows Azure conformance tests are now passing after removing a broken kubeconfig command, while the website team ships Docsy 0.7 and the infrastructure desk begins streamlining registry and monitoring tooling.
read --wire →
Go
Go's language server reached a major milestone overnight with v0.22.0, unlocking interactive refactoring across the ecosystem while the crypto package aggressively modernizes its CPU instruction set.
read --wire →
Go
The Go standard library just got slightly faster with a focused refactor that eliminates redundant method calls in the networking stack.
read --wire →
HashiCorp
HashiCorp dropped nightly builds across three core Nomad projects, giving operators their first crack at unreleased features before they hit stable.
read --wire →
Kubernetes
Kubernetes operations infrastructure eliminates a critical unmaintained mesh dependency from worker nodes while documentation teams unify localization standards across three languages.
read --wire →
Go
Go's runtime will now crash explicitly if a 64-bit timespec can't convert to 32-bit, catching silent failures before they corrupt your timing logic.
read --wire →
HashiCorp
Nomad Autoscaler shipped security fixes for 14 vulnerabilities across Go toolchain and dependencies overnight, while Azure provider teams finalize deprecated property cleanup ahead of major version release.
read --wire →
Kubernetes
kOps is gutting years of cloud configuration cruft, moving Azure cloud-config from per-node files to a cluster-managed Secret while deprecating the unused in-tree cloud provider flag that's been dead code since Kubernetes 1.31.
read --wire →
Go
An attacker can inject arbitrary content into errors returned by net/textproto when external input reaches the package unescaped, potentially exploiting HTTP clients that parse untrusted server headers.
read --wire →
HashiCorp
Both consul-k8s and consul-dataplane shipped go-discover updates that fix two container CVEs, and you need them before your next production deploy.
read --wire →
Kubernetes
Kubernetes patched a critical managedFields bug that was stripping data on conversion webhook failures, while test infrastructure begins a major migration to standardize Windows Azure testing across CAPZ.
read --wire →
Go
Image decoders can allocate memory proportional to untrusted headers before validating pixel data, a security footgun that just got official guidance.
read --wire →
HashiCorp
Consul-K8s shipped a critical security fix for CVE GO-2026-4918 overnight while simultaneously restoring unit tests that had vanished from the main branch.
read --wire →
Kubernetes
Kubernetes apiserver just cut redundant object conversions in CEL evaluation, while kops shipped critical fixes for eBPF networking and cloud provider integrations.
read --wire →
Go
Go is standardizing its PowerPC implementation across endianness while Windows developers gain syscall access to extended file attributes.
read --wire →
HashiCorp
Consul upgraded Go 1.26.3 to close eight chained CVEs in the standard library overnight, while consul-k8s 1.8.x stops firing misleading FIPS compliance warnings on every pod startup.
read --wire →
Kubernetes
etcd-manager jumped to v3.0.20260512 in kops while a coordinated kube-openapi revert rippled across four core repos to fix an API definition issue.
read --wire →
Go
Go's allocator just got leaner, dropping specialized memory classes above 128 bytes to cut icache misses and improve performance across the board.
read --wire →
HashiCorp
Every major HashiCorp provider repository is undergoing a coordinated compliance audit to align with IBM licensing standards, and the headers are rolling in now.
read --wire →
