$ tail -f topics/go.log
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
21 updates across 3 projects this week.
One calm review of what shipped across Go - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Go projects - refine anytime. · Read a sample issue →
Kubernetes
The website desk is in translation overdrive while test infrastructure quietly stops burning compute on GPUs that vanished from the test suite months ago.
read --wire →
Go
Go shipped a critical fix for an x86 ABI0 NOFRAME regression that broke existing code, while explicitly documenting that ReverseProxy does not sanitize forwarded cookies.
read --wire →
HashiCorp
James Bardin just yanked five layers of unused abstractions out of Terraform's core graph engine, clearing the path for what comes next.
read --wire →
Kubernetes
Chinese API documentation sync is racing ahead while cloud-provider-gcp ships critical fixes for GCS bucket propagation delays and new metis admin tooling.
read --wire →
Go
Go's SSH implementation leaks window credits on discarded extended data, potentially freezing channels, while the compiler team restructures its core SSA package to improve modularity.
read --wire →
HashiCorp
Go-getter pulled in the latest AWS SDK updates, while memberlist tightened its metrics dependencies and the design system cut asset bloat by nearly 60 percent.
read --wire →
Kubernetes
KOps tightened private S3 bucket access with signed curl requests while fixing a health check bug that misread controller conditions across the board.
read --wire →
Go
The Go compiler just blocked a subtle optimization that could corrupt memory when loop variables depend on cleared values.
read --wire →
HashiCorp
Consul shipped a Go version update overnight while Nomad tooling pushed fresh development snapshots to testers.
read --wire →
Kubernetes
Kops is methodically removing the last gossip-protocol cruft and tightening EC2 permissions to least-privilege, while minikube lays the foundation for multi-platform node provisioning.
read --wire →
HashiCorp
Google Cloud provider updates across both stable and beta channels ship Cloud Run v2 scaling controls, network gateway enhancements, and a critical backupdr restore tag bug fix.
read --wire →
Kubernetes
Kubernetes 1.37 sneak peek is live on the website, while kOps 1.37's removal of gossip DNS and protokube unlocks a major security hardening: stripping API credentials from control-plane nodes that never needed them.
read --wire →
Go
Brad Fitzpatrick landed a stack object alignment fix that uncovers and fixes a latent mips64le pointer offset bug while accidentally making amd64 and arm64 binaries smaller.
read --wire →
HashiCorp
Boundary's Helm chart defaults to the latest enterprise image while Consul Kubernetes hardens its service mesh proxy layer with new acceptance tests.
read --wire →
Kubernetes
Kubernetes Operations removes gossip DNS support entirely in 1.37, completing a deprecation cycle that eliminates protokube and its mesh dependencies.
read --wire →
Go
Go's compiler is silently corrupting unsigned integer sign extensions on RISCV64, a critical correctness issue that requires immediate attention across the platform.
read --wire →
HashiCorp
Consul K8s fixed a silent reconciliation failure where external authorization filter changes weren't reaching Consul, while Nomad cut plan applier bottleneck by overlapping evaluation with application.
read --wire →
Kubernetes
Cluster Autoscaler re-enabled printf vet checks after Go 1.24 upgrade while kops rushed out fixes for Hetzner API removal and Azure terraform v5 incompatibilities.
read --wire →
Go
The core library shipped two security-relevant fixes overnight that eliminate algorithmic vulnerabilities in URL resolution and XML decoding that could be exploited to cause denial of service.
read --wire →
HashiCorp
Consul's test suite just got a rewrite engine that lets both old and new tests run together while the UI team methodically converts acceptance tests feature-by-feature.
read --wire →
