$ tail -f topics/go.log
Daily updates from Go and the cloud-native infrastructure written in it - Kubernetes, HashiCorp's stack, and the Go standard library.
21 updates across 3 projects this week.
One calm review of what shipped across Go - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top Go projects - refine anytime. · Read a sample issue →
Go
The Go compiler just shipped critical fixes for ARM64 integer overflow handling and net/http now properly validates origin URLs, while pkgsite quietly ships Vertex AI embeddings infrastructure.
read --wire →
HashiCorp
The Terraform AWS provider is shedding redundant Read calls from List operations, while Packer Azure solves a long-standing limitation around mixed data disk deployments.
read --wire →
Kubernetes
Kubernetes code-generator just promoted ten validation tags to stable, tightening the screws on object validation across the entire API ecosystem while silencing previously invisible validation failures.
read --wire →
Go
The Go standard library is removing unsafe type assertions that break when middleware wraps server request bodies, fixing a class of connection reuse bugs.
read --wire →
HashiCorp
Terraform's Azure provider is deprecating Redis Enterprise resources and auto-deleting Service Bus defaults, while HashiCorp's core libraries patch Go crypto vulnerabilities across the stack.
read --wire →
Kubernetes
Kubernetes slashed test execution time by switching kubelet synctest away from time.Sleep, while apiserver deprecated metrics finally got the axe after months of warnings.
read --wire →
Go
The crypto/ssh package is raising its RSA modulus limit to 16384 bits to accept keys that OpenSSH actually generates, while the runtime team patches a critical garbage collection miss on ARM64.
read --wire →
HashiCorp
Three core HashiCorp projects pulled in upstream Go library updates overnight, including a critical semaphore fix that could prevent panics in concurrent workloads.
read --wire →
Kubernetes
The k8s-infra team provisioned a new GCP project for Vertex AI workloads in prowjobs while core Kubernetes merged critical fixes to CEL admission controllers and etcd3 iteration logic.
read --wire →
Go
CVE-2026-46595 closed a critical gap where SSH source-address restrictions weren't enforced consistently across all authentication methods.
read --wire →
HashiCorp
HashiCorp is pushing development snapshots live across Nomad's driver, autoscaling, and packaging layers, giving operators early access to unreleased features before they ship.
read --wire →
Kubernetes
A cascading restart bug in node-problem-detector's kmsg watcher caused 37k restarts in 200ms and could deadlock the shutdown path, and the fix just landed.
read --wire →
HashiCorp
Terraform-provider-azurerm shipped a critical regression fix for Palo Alto while simultaneously shipping five other PRs that reshape Azure and Google Cloud resource coverage.
read --wire →
Kubernetes
Kubernetes core jumped cadvisor to v0.60.4, dragging golang.org/x/net from pseudo-versions into stable release territory and removing a long-standing protobuf dependency in one move.
read --wire →
Go
The playground sandbox can no longer hang on container timeouts, and gopls is cleaning up internal linkname hacks that were recipes for trouble.
read --wire →
HashiCorp
Consul-K8s locked down a remote denial-of-service vulnerability in Markdown while simultaneously shipping external authorization support to the API Gateway.
read --wire →
Kubernetes
Kops now automatically cleans up dns-controller deployments when clusters migrate away from gossip DNS, solving a manual deletion problem that's plagued operators for releases.
read --wire →
Go
gopls 0.23.0 landed overnight while the Go core team fixes a Plan 9 regression in file removal that could break deployments on legacy systems.
read --wire →
HashiCorp
Packer finally closes the timestamp gap with two new HCL functions that match Terraform's behavior, while Consul-K8s hardens its dependency stack across three critical libraries.
read --wire →
Kubernetes
Kubernetes is shipping etcd 3.7.0 final across test infrastructure, kops, and the main distribution, ending months of release-candidate testing and unlocking production etcd upgrades for 1.37+.
read --wire →
