$ tail -f topics/go.log
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
21 updates across 3 projects this week.
One calm review of what shipped across Go - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Go projects - refine anytime. · Read a sample issue →
Go
The Go team shipped three heavyweight optimizations overnight that speed up module loading for gopls and shrink binaries across every platform.
read --wire →
HashiCorp
HashiCorp shipped auto_unlock support for LDAP static roles across Terraform Vault provider and docs, gating the feature behind Vault Enterprise 2.1+.
read --wire →
Kubernetes
Minikube's ISO now bundles Helm binaries for both x86_64 and aarch64, eliminating runtime downloads and matching addon expectations.
read --wire →
Go
A URL query parsing bug in cmd/go's credential matching gets fixed [ref:1], while the JSON encoder removes its cycle detection guarantee in v2 [ref:3].
read --wire →
HashiCorp
Consul-K8s shipped critical dependency updates overnight addressing a gRPC vulnerability, while Packer fixed a template interpolation bug that broke HCL2 builds with user variables.
read --wire →
Kubernetes
Kube-state-metrics shipped three performance fixes that eliminate per-scrape allocations and close a goroutine leak that multiplies with every config reload.
read --wire →
Go
The Go compiler is shedding version-dependent code paths now that Go 1.26 is the floor, and pkgsite is building infrastructure to detect breaking changes across the ecosystem.
read --wire →
HashiCorp
The Azure provider just shed unused dependencies, tightening its supply chain ahead of the next release cycle.
read --wire →
Kubernetes
Cloud Provider vSphere aligns with the release candidate while test infrastructure plugs a dangerous hole in its config forking logic.
read --wire →
HashiCorp
Terraform's Azure provider is ripping out feature flag gates across postgres and storage resources, a sign the 5.0 migration is hitting its stride.
read --wire →
Go
The Go compiler just cut another 2,700 instructions from binaries on linux/riscv64 by compressing bare function returns.
read --wire →
HashiCorp
Terraform's Azure provider is shipping stricter acceptance test guards and a major linting overhaul that caught two real bugs in the codebase.
read --wire →
Go
The Go extension for VS Code is enforcing stricter TypeScript rules across the codebase while shipping a major update to its revive linter.
read --wire →
HashiCorp
Consul Enterprise users hitting HTTP 503s after upgrading to 2.0.x now have a fix: API gateways with HTTP listeners were resolving downstream services with wrong protocols, breaking discovery chains in peered clusters.
read --wire →
Kubernetes
Addon-resizer 1.8.24 lands with new apiserver resource metrics, while perf-tests benchmark overhaul adds watch delay tracking and stable QPS enforcement.
read --wire →
Go
Go's compiler now constant-folds expensive math/bits operations at compile time, while crypto/tls hardens FIPS 140-3 enforcement and vscode-go cleans up its code lens architecture.
read --wire →
HashiCorp
HashiCorp is systematically removing feature flags across the Azure provider while Consul teams move security scanning upstream in their release workflows.
read --wire →
Kubernetes
The test-infra automation pushed fresh builds of Boskos and staging images across GCR and Artifact Registry as CAPG hit OOM walls compiling google.golang.org/api.
read --wire →
Go
Go shipped a security fix for html/template that blocks JavaScript regexp injection attacks, while simultaneously addressing a goroutine accumulation bug in HTTP/2 transports that could exhaust memory on long-lived connections.
read --wire →
HashiCorp
Terraform AWS provider v6.34.0 through v6.57.1 landed overnight with ElastiCache fixes, new ECS capacity reservation support, and the second MailManager resource joining the roster.
read --wire →
