#605 — June 12, 2026

Together with

How Much Do AMD64 Microarchitecture Levels Help? — A benchmark of Go’s GOAMD64 levels on roaring shows gains from v2/v3, but little from v4. A reminder to benchmark CPU-heavy code before changing build targets: v4 makes binaries require AVX-512-capable CPUs, but the Go compiler does not currently emit AVX-512.

Daniel Lemire

Query Billions of Time-Series Rows Without Leaving Postgres — TimescaleDB extends Postgres for analytics at any scale. Hypertables partition automatically. Hypercore compression cuts storage 10x. Continuous aggregates keep dashboards live. No second database. $1000 credit.

Tiger Data (creators of TimescaleDB) sponsor

PROPOSALS AND IN BRIEF:

The core Go team's Alan Donovan proposes adding a NewEntrypoint API to the testing package to simplify calling a function in a child process.
x ? y : z-style conditionals have been rejected in Go before, but a proposal floats a (if cond then expr else expr) approach.
🔒 A senior security engineer argues net.IP.IsPrivate is widely misused as a security primitive, driving recurring SSRF CVEs across the ecosystem.
🔎 GitHub CodeQL's pull-request scans now run incrementally for Go (and C/C++).
🇪🇺 GopherCon Europe 2026 is taking place next week in Germany.
There's an update on the idea of adding url.MustParse and a generic must.Do to Go.

Subtle Go Security Issues to Audit For — A follow-up to 2022’s Go code review notes, with a closer look at Go security review topics around httputil.ReverseProxy, net/url, encoding/json, integer overflows, null bytes, and CSRF.

Zoltan Madarassy and Alex Brown

Web Search API for Go Developers — Get real-time Google, Maps, Shopping, and other search engine data in structured JSON.

SerpApi sponsor

📄 Reading Wi-Fi Data from Go on macOS – Working around Apple removing airport with a signed Swift helper embedded in the author's macwifi package. Jaison Erick

📄 Discovering and Navigating //go:linkname Directives – How the directive aliases symbols across packages, plus a CLI to map its use. Marin Atanasov Nikolov

📄 Special Cases in Go – "Go tries to be a simple language, but it doesn’t always succeed." Nick Tobey

🛠 Code & Tools

giu 0.15: A Dear ImGui-Based GUI Framework — The cross-platform immediate-mode GUI framework built on Dear ImGui returns with its first release in over a year. Updates include a light theme and macOS font-scaling fixes.

Allen Dang

📋 clipboard 0.8: The Clipboard Library Goes Cgo-Free on Desktop — golang.design's cross-platform clipboard library drops Cgo on all desktop platforms and adds native Wayland support. It also improves MIME-type processing and image handling.

Changkun Ou

🔑 Talos: An Open Source API Key Server from Ory — The team behind Hydra and Kratos open sources a Go-powered API key server for users, services, machine-to-machine, and AI agents.

Ory

Porcupine 1.2: A Linearizability Checker for Distributed Systems — You model a distributed system in Go, feed in a concurrent operation history, and Porcupine checks whether it's linearizable. There's a 2017 blog post that explains more.

Anish Athalye

Gost-DOM 0.12 – Headless browser that simulates browser environments for TDD. Here's why you might use it and how to get started – the API is pretty nice.
sx 0.6 – The Go-powered network scanner adds macOS support.
Restic 0.19.0 – Popular Go-powered backup program.
Ginkgo 2.30.0 – The testing framework.

📰 Classifieds

🤖 Code review has four jobs. AI took the first — what happens to the other three? AgentField's open-source breakdown → Read the post.