#553 — May 7, 2025 |
|
Go Weekly |
![]() |
Practical Patterns for Graceful Shutdowns — Shutting down gracefully can mean the difference between a good user experience with consistent data and angry users (or even just yourself!) with corrupted data. Follow and adapt this five-step approach, and shutting down won’t open you up to issues. Phuong Le (VictoriaMetrics) |
Proposal: Add Bare Metal Support to Go? — Andrea proposes a new Andrea Barisani et al. |
![]() Cut Go Code Review Time and Bugs in Half — Code reviews are time-consuming. CodeRabbit is your AI co-pilot—instantly generating review comments, one-click fixes, and custom AST-grep rules. It can even plan refactors and merge via chat. Trusted on 10M+ PRs across 1M repos and 70K+ OSS projects. CodeRabbit sponsor |
wget to Wipeout: Malicious Go Modules Fetch Destructive Payload — A cautionary tale of a recent, stealthy supply-chain attack, by way of some malicious Go modules, which saw a single line of code wipe an entire disk clean. As ever, take care over your dependencies. Kush Pandya (Socket) |
Organize Your Go Middleware Without Dependencies — Go 1.22 introduced some enhancements to HTTP routing, so now it could make a lot of sense to remove dependencies around routing and handle things like middleware yourself. It doesn't take much code, either. Alex Edwards |
Building a More Accessible GitHub CLI — GitHub’s CLI tool is powered by Go and the GitHub team shares the challenges faced for making it more accessible (with before-and-after videos) to screen readers and those with special visual requirements in particular. Popular Go library creators Charm make an appearance to lend a hand too. Ryan Hecht and Andrew Feller (GitHub) |
📢 Go 1.24.3 and 1.23.9 have been released. v1.24.3 includes a security fix for a path traversal bug. 📄 Bloom Filters Explained, and Implemented, in Go – A perennially useful probabilistic data structure. Eli Bendersky 📄 How to Find and Fix Vulnerable Dependencies with 📄 Go Doesn’t Believe in Frameworks, But Teams Still Need Them Marcus Kohlberg (Encore) |
🛠 Code & Tools |
![]() |
k6 1.0: A Go-Powered Load Testing Tool — A full-featured, configurable load generation tool that uses the Sobek Go-powered JavaScript engine to support writing test scripts in JavaScript. v1.0 promises stability, first-class TypeScript support, and easier extensibility. Grafana Labs |
Don't Make These Feature Flag Mistakes — 7 mistakes to avoid, one of which cost a company $440M. PostHog sponsor |
Odin: A Pragmatic C Alternative with a Go Flavor — There’s another new(ish) “data-oriented” language out there with some Go-like features that you may want to try. More details and docs here. Bitshifters |
nativewebp: Native WebP Image Library — WebP is a modern raster graphics format commonly used on the Web and this library lets you work with it from Go without dependencies. The new v1.2 release adds full WebP animation support. Hugo Smits |
|
|
🛠 Might be useful.. |
![]() |
GoVisual: A Pure-Go HTTP Request Visualizer and Debugger — A zero-config HTTP request visualizer and debugger targeted at local Go web app development use cases. Includes middleware tracing and OpenTelemetry integration. Arif Dogan |