--- title: "The current state of cryptography in Go" publication: "Go Weekly" issue: 580 published_at: "2025-11-26" canonical_url: "https://golangweekly.com/issues/580" --- Plus Go 1.26 gets frozen today, what the Go team's planning for 2026, and we drink yet more green tea. | #​580 — November 26, 2025 [Read the Web Version](https://golangweekly.com/issues/580) 📅 This is a rather early note, but **Go Weekly will be moving to Fridays in January 2026,** as part of a schedule reshuffle for most of [our newsletters](https://cooperpress.com/publications/). __ _Your editor, Peter Cooper_ Together with [![Tiger Data logo\](https://res.cloudinary.com/cpress/image/upload/c_fill,g_auto,w_1280,h_282/e_make_transparent/co_white,e_outline:30/px1u7kjyvz7xnbm6ytir.png)](https://www.tigerdata.com/blog/we-taught-ai-to-write-real-postgres-code-open-sourced-it) Go Weekly [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/wmepeflbd0qo8y6slir0.jpg)](https://words.filippo.io/2025-state/) [The 2025 Go Cryptography State of the Union](https://words.filippo.io/2025-state/) — A detailed slide-rich transcript and video of Filippo’s GopherCon presentation about Go’s cryptography standard libraries: last year’s work gave Gophers enhanced abilities to address future vulnerabilities and comply with rigorous standards. Filippo Valsorda [![\](https://res.cloudinary.com/cpress/image/upload/c_limit,w_480,h_480,q_auto/copm/1e88240e.png)](https://www.tigerdata.com/blog/we-taught-ai-to-write-real-postgres-code-open-sourced-it) [Tiger Data Taught AI to Write Real Postgres Code. Try it Today](https://www.tigerdata.com/blog/we-taught-ai-to-write-real-postgres-code-open-sourced-it) — Tiger Data taught AI how to write idiomatic Postgres and open-sourced it. pg-aiguide brings real DB expertise to Claude Code, or any other MCP-enabled tool. Tiger Data sponsor ▶[Advancing Go Garbage Collection with Green Tea](https://www.youtube.com/watch?v=gPJkM95KpKo) — Michael of the Go team deftly explains how Go’s garbage collection works and how the new so-called ‘green tea’ approach will make things better by default in Go 1.26. The official Go blog has [an article about this topic](https://go.dev/blog/greenteagc) if you’d rather read than watch. Michael Knyszek 💡 SPOILER: We also find out why 'green tea' is so-called: Austin Clements created the prototype while cafe-crawling in Japan drinking 'lots of matcha.' **IN BRIEF:** - [v0.45.0 of golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) has been tagged to address two security issues in `crypto/ssh` and `crypto/ssh/agent` ([CVE-2025-58181](https://github.com/advisories/GHSA-j5w8-q4qc-rx2x) and [CVE-2025-47914](https://github.com/advisories/GHSA-f6x5-jh6r-wrfv) respectively). - [Go 1.26](https://tip.golang.org/doc/go1.26)'s 'development freeze' occurs today meaning that any new features going into Go 1.26 must have been committed by now. You can [learn more about Go's release cycle here.](https://go.dev/wiki/Go-Release-Cycle) - [The Go team's latest meeting notes](https://github.com/golang/go/issues/43930#issuecomment-3576250284) mention a few '2026 planning' items including future work on scalability, [runtime.free](https://github.com/golang/go/issues/74299), and SIMD support. - 📺 A list of the [top 15 most watched recordings of Go talks](https://www.techtalksweekly.io/p/100-most-watched-talks-in-java-rust?open=false#%C2%A7go) so far this year. [Using Docker to Deal with cgo Build Complexity](https://www.dolthub.com/blog/2025-11-21-easy-cgo-builds-with-docker/) — Go’s toolchain makes it easy to build binaries for different systems, but if your project has any dependencies that rely on cgo, things rapidly get more complex. Here’s how the Dolt team uses Docker to make things easier. Zach Musgrave (DoltHub) 📄 [A Million Ways to Die From a Data Race in Go](https://gaultier.github.io/blog/a_million_ways_to_data_race_in_go.html) Philippe Gaultier 📄 [Why I Built My Own Static Site Generator in Go](https://tduyng.com/blog/why-i-built-my-own-static-site-generator/) Duy Ng 📄 [Graceful Shutdown in Go](https://pawelgrzybek.com/graceful-shutdown-in-go/) Paweł Grzybek 🛠 Code & Tools [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/ddacvvudkcpt1aousimk.jpg)](https://boringsql.com/posts/regresql-testing-queries/) [RegreSQL: Regression Testing for Postgres Queries](https://boringsql.com/posts/regresql-testing-queries/) — A look into a Go-powered tool for applying Postgres’s own regression testing methodology to your SQL queries in order to verify that changes, whether to your queries or schema, don’t break how you expect those queries to work (e.g. are the right indexes or scan types still being used?) Radim Marek [Goyek 3.0: A Go Library for Task Automation](https://github.com/goyek/goyek) — A simple, cross-platform task automation library (think `make`-like) where tasks are defined in a [Cobra](https://github.com/spf13/cobra)-like style and the actions have a unit test feel. [v3](https://github.com/goyek/goyek/releases/tag/v3.0.0) has some breaking changes. goyek [Macroscope - The Best AI Code Review Tool for Go](https://links.macroscope.com/go-newsletter) — The highest bug detection rates for Go on the market. Use discount code `MACROGO` to get 50% off your first 2 months! Macroscope sponsor [Tinyauth: An Easy Way to Secure Apps with a Login Screen](https://tinyauth.app/) — A Go-powered single binary way to add OAuth and LDAP support in a middleware-fashion in front of your webapps, even if they’re not written in Go. [▶️ Here’s a video](https://www.youtube.com/watch?v=qmlHirOpzpc) demonstrating how to use it in front of any Docker-powered app. [GitHub repo.](https://github.com/steveiliop56/tinyauth) Tinyauth Team - 🤖 [Agent Development Kit (ADK) for Go 0.2](https://github.com/google/adk-go) – Google's model-agnostic toolkit for building and deploying AI agents. - [Goa 3.23](https://github.com/goadesign/goa/releases/tag/v3.23.0) – DSL for building microservices. _"The code generator has been optimized to be over 80% faster."_ - [go-redis 9.17](https://github.com/redis/go-redis/releases/tag/v9.17.0) – Official Go Redis client library. Adds support for [Redis 8.4](https://redis.io/docs/latest/develop/whats-new/8-4/) and its new commands. - [River 0.28](https://github.com/riverqueue/river) – Fast & reliable Postgres-powered background jobs system for Go. - [pgweb 0.17](https://github.com/sosedoff/pgweb) – Web-based, cross-platform Postgres client. - [Resty 2.17](https://resty.dev/) – Simple HTTP and REST client library. - 🤖 [Eino 0.7](https://github.com/cloudwego/eino) – LLM/AI app dev framework for Go. - [webdav 5.10](https://github.com/hacdias/webdav) – Standalone WebDAV server. 📢 Elsewhere in the ecosystem Some other interesting stories in the broader landscape: [![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60,q_auto/vwoub1sxg7bsjqzzr8ez.jpg)](https://github.blog/changelog/2025-11-25-secrets-in-unlisted-github-gists-are-now-reported-to-secret-scanning-partners/) - ⚠️ For years, GitHub has reported secrets/tokens 'leaked' in Git repos to the original providers so they can be revoked, but now it's [reporting secrets in unlisted GitHub Gist posts too](https://github.blog/changelog/2025-11-25-secrets-in-unlisted-github-gists-are-now-reported-to-secret-scanning-partners/) (no they're _not_private). - 🧟 This news would have been funnier on October 31, but [AWS has resurrected CodeCommit from the dead.](https://aws.amazon.com/blogs/devops/aws-codecommit-returns-to-general-availability/) CodeCommit was _is_ AWS's private Git repo hosting platform and it's generally available again. - Git 3.0 will default to [using 'main' as the default branch.](https://thoughtbot.com/blog/git-3-0-will-use-main-as-the-default-branch) - [Amazon RDS for PostgreSQL now supports Postgres 18](https://aws.amazon.com/about-aws/whats-new/2025/11/amazon-rds-postgresql-major-version-18/). - How about [solving FizzBuzz with cosines?](https://susam.net/fizz-buzz-with-cosines.html) Curated by Peter Cooper and [Glenn Goodrich](https://twitter.com/ruprict). Go is a [trademark of Google](https://go.dev/brand). The [Go gopher](https://go.dev/blog/gopher), whenever used, is an original creation by Renée French. [Change your email](https://golangweekly.com/edit_subscription/*|UID|*) [Stop getting this newsletter](https://golangweekly.com/leave/*|UID|*) © Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom