Golang Weekly

Generic methods are a-go for Go 1.27

Fri, 29 May 2026 00:00:00 +0000

#603 — May 29, 2026

Go Weekly

Generic Methods Land in Go — Back in January, one of Go’s co-creators proposed bringing generic methods to Go (rather than just functions) and now he tells us: “This has been implemented and documented.” The functionality is behind GOEXPERIMENT / in tip for now, but likely to land as a Go 1.27 feature.

Robert Griesemer

AI Engineering Fundamentals with Scott Moss of Netflix — Learn to build reliable AI features. Build an AI-assisted Excalidraw app, set up eval harnesses, master context engineering, and ship agents that actually work.

Frontend Masters sponsor

Migrating from Go to Rust — The author admits he’s “not a fan of Go” and argues the Go-to-Rust case, while still spending a lot of time conceding what Go does better. His honest framing makes his technical points, of which there are many, land a little harder.

Matthias Endler

🤖 Claude as Your Performance Analysis Partner — An engineer put Claude to work on Go’s Green Tea GC, spotting atomic-op bottlenecks in tryDeferToSpanScan and flagging compiler optimizations missed in the assembly. She remains realistic, covering where the suggestions break down.

Archana Ravindar (Red Hat)

Tracing HTTP Requests with net/http/httptrace — net/http/httptrace has been in the stdlib since Go 1.7 and Blain thinks you’ve probably never used it. Here’s how to put it to work with a timing CLI, a logging RoundTripper, and some gotchas the docs skip.

Blain Smith

The Go Language Server Can Do Some Impressive Code Navigation — gopls finding its way around Go code is unremarkable. Chris was more impressed by where else it could dig.

Chris Siebenmann

Give Your Agent a DB for Every Task — "Databases were long-lasting infra. Now I spin one up for an afternoon and kill it when done. Feels wasteful. It's not."

Ghost sponsor

📄 How My Minimal, Memory-Safe Go rsync Steers Clear of Vulnerabilities – An audit of how a minimal Go rsync sidesteps recent CVEs, with os.Root and a small feature set doing as much work as memory safety. Michael Stapelberg

📄 The Gentlemen Ransomware: Dissecting a Self-Propagating Go Encryptor – A teardown of a Garble-obfuscated ransomware-as-a-service. Microsoft

📄 That One Time I Used Go Panics for Flow Control – “Sometimes crime is the answer.” NonCrab

🛠 Code & Tools

gookit/color: Terminal Color Rendering Library — fatih/color is the go-to library for this, but Gookit’s take is a bit more maximalist supporting HTML-esque styling tags, 256 color, hex codes, as well as themes for certain types of output (e.g. debugging levels).

Gookit

g 1.0: A Simple Go Version Manager — If Mise doesn’t suit you, g offers an alternative that uses the official prebuilt Go archives with no shims, daemons or dependencies. v1.0 adds SHA-256 verification and archive mirror support.

Stefan Maric

PgQue: A Pure SQL + PL/pgSQL Zero-Bloat Postgres Queue — A pure SQL-based, zero-bloat queuing system for Postgres that's more similar to Kafka than a typical job queue. It has a Go driver which now includes support for cooperative consumers, so multiple workers can share one logical consumer cursor and drain workloads in parallel.

Nikolay Samokhvalov

GoReleaser 2.16 – The popular release tool continues its reach far beyond Go, now adding Node.js single-executable app support.
chi 5.3 – Lightweight and composable router for building HTTP services.
🔎 tldx 1.4 – Domain availability research tool. v1.4 adds an MCP server.
wazero 1.12 – Zero-dependency WebAssembly runtime written in Go.
Buf 1.70 – Modern toolchain for Protobuf.

📰 Classifieds

⚙️ Treat coding agents like services, not terminals. Compose Claude Code, Codex & Gemini in Go — 100+ agent recipes. agentfield.ai/github.

😄 And one for fun…

Figurine: A Go App to Print Your Name in Style — A bit of fun to close the issue. Might be something nice to use in your dot files or scripts. Amazingly it comes with 276 fonts ready to go.

Arsham Shirvani

pkg.go.dev gets an official API

Fri, 22 May 2026 00:00:00 +0000

#602 — May 22, 2026

Read the Web Version

Go Weekly

▶ What's New in Go: The Google I/O 2026 Edition — Two Go team members give a 15 minute high-level overview of the state of Go from Google’s perspective. Topics include how Google is leaning heavily on Go with its in-house agentic development efforts, Go 1.25/1.26 developments, SIMD, and security work.

Balahan and Dougherty (Google)

⬆️ This talk provides a great look at how Google "sees" Go as of 2026, and includes some fantastic illustrations too. Blog post version incoming..?

Live Workshop: Build a Sensor Analytics Pipeline — Free virtual workshop, May 28 at 12 PM ET. Build a working IoT analytics pipeline on Tiger Cloud from raw sensor data to live queries. Hypertables, Hypercore columnar compression, and continuous aggregates. Leave with your own running instance.

Tiger Data (creators of TimescaleDB) sponsor

Introducing the pkg.go.dev API — Go’s official package site finally has an official API interface that tools can use to “reason about the Go ecosystem with greater precision.” This post gives a tour of its capabilities.

Lee, Kim and Amsterdam (The Go Team)

PROPOSALS OF THE WEEK:

Filippo Valsorda proposes changing the behavior of SSL_CERT_FILE / SSL_CERT_DIR in crypto/x509.
A Docker employee suggests moving security releases back to Tuesdays to avoid security reviews on Fridays.
Alan Donovanof the Go team asks: it time to drop gccgo (the Go frontend for GCC)?

The Maintainer's Dilemma — The prolific creator of Cobra, Viper, and Hugo shares some insights into the maintenance backlog of a popular Go library in the AI era. He also touches on how new tools can both help and hinder maintainers.

Steve Francia

A Practical Guide to Profiling in Go — A long, hands-on walk through profiling apps with pprof, including features added to GoLand to make it easier to collect and visualize results.

Dominika Stankiewicz (JetBrains)

How I Migrated My Go & SQLite App to Depot CI — A step-by-step walkthrough of moving a real-world Go app workflow from GitHub Actions to Depot for faster pipelines.

Depot sponsor

⭐ The 10 Go Error Handling Commandments – Thou shalt read this post. Preslav Rachev

📄 Popular Go Decimal Library Targeted by Typosquatting Campaign – The typo in this case was in the name of the GitHub account rather than the library. Kush Pandya (Socket)

📄 Generating an MCP Server in Go – Using the protoreflect package to produce tool definitions for the Go MCP SDK. Eric Chiang (Oblique)

📄 Configuring a Go HTTP Server for Unencrypted HTTP/2 (h2c) Dan McGee

🛠 Code & Tools

Fiber 3.3: Express.js-Inspired Web Framework for Go — A web framework, built on fasthttp, inspired by Express.js, that offers high performance coupled with a comfortable developer experience. v3.3 adds support for host auth middleware and lightweight SSE middleware.

Fenny and Contributors

💡 The Fiber team has also blogged about Fiber's CLI tool that provides a useful dev server environment, complete with live reloading, project scaffolding, and static file serving.

errcheck 1.20: A Tool to Check That You Checked for Errors — Ensures that returned errors are assigned to a variable or explicitly discarded by being assigned to _.

Kamil Kisiel

Gobee: Write Your BPF Programs in Go, Not C — An experiment in transpiling a strict subset of Go into C suitable for creating eBPF programs to run in the Linux kernel, plus typed cilium/ebpf bindings to drive them.

Bora Tanrikulu

Jet 2.15: Type Safe SQL Builder with Code Generation — A type-safe SQL builder (not an ORM!) with code generation and automatic query result data mapping. It supports Postgres, MySQL/MariaDB and SQLite. Recent releases have added support for Postgres ranges, materialized views, and arrays.

Jet

✉️ Enmime 2.4 – MIME mail encoding and decoding package.
Permify 1.7 – Google Zanzibar-inspired authorization service.
Sarama 1.49 – IBM's Apache Kafka client library.

📰 Classifieds

⚙️ Treat coding agents like services, not terminals. Compose Claude Code, Codex & Gemini in Go — the harness-as-membrane writeup: agentfield.ai/blog.

CodeRabbit: Your team's second brain. Now in Slack. One agent for your entire SDLC to keep context and cut review time. Trusted by 6M+ repos.

Why Cilium vendors every Go module in 2026

Fri, 15 May 2026 00:00:00 +0000

#601 — May 15, 2026

Read the Web Version

Go Weekly

'Go Fuzzing Was Missing Half the Toolkit: We Forked the Toolchain to Fix It' — Go’s fuzzer lags the LibAFL-class tools Rust and C++ devs take for granted. Enter gosentry: a fork of the Go toolchain that runs testing.F harnesses on a LibAFL engine, adding struct-aware and grammar-based fuzzing, race and goroutine-leak detection. Together these surface bug classes the native fuzzer can miss.

Kevin Valerio (Trail of Bits)

From 8 Seconds to Under 1: How Depot CI Boots Fast — No warm pools, no pre-warming. Depot CI's microVMs start just-in-time, so cold boot speed is everything. The full optimization story: custom kernel, replacing systemd, ditching cloud-init, and tuning huge pages to get from 8 seconds to under 800ms.

Depot sponsor

How Cilium Hardens Its Go Supply Chain End to End — Vendoring every Go module is just one of a dozen controls in Cilium’s GitHub Actions and supply chain playbook, from gating PR triggers to signing releases, with an honest list of the gaps they haven’t closed yet.

André Martins and Feroz Salam (Cilium)

📊 The GoLand 2026.2 Early Access Program — The commercial Go IDE focuses on performance, pulling perf work out of separate tools and into the IDE, like built-in profiler visualization and analysis, escape analysis, a struct layout optimizer, and real-time CPU/memory usage monitoring.

Artem Pronichev (JetBrains)

💡 EAP builds are free to use for 30 days over the EAP cycle, so you can daily drive it for free until the beta.

btype: Fast B-Tree-Based Collection Types — From the creator of GJSON comes a new library offering B-tree-based collection types (including maps, sets, tables, queues, and stacks) that’s faster than existing B-tree implementations in Go, Rust, and C++.

Josh Baker

Building a Distributed Search Engine in Pure Go — Multi-Raft consensus, SIMD-accelerated vectors (via go-highway), and ML inference (via gomlx) without leaving the Go toolchain.

Antfly

📄 A Deep Dive Into How Your Go Code Becomes a Binary – “This is a really long deep dive.” Gabor Koos

🛠 Code & Tools

🔎 gofumpt 0.10: An Even Stricter gofmt — If gofmt doesn't go far enough for you, gofumpt (which can be run as a drop-in replacement for gofmt) has even more rules to keep your codebase under control. v0.10 is based on Go 1.26’s gofmt and adds… yes, even more rules.

Daniel Martí

58ms to Fork a Database. 0ms to Clean It Up — ghost gives your agent its own Postgres fork per task. No cleanup, no shared state, no project limits. Try for free.

ghost sponsor

go-app 11.0: Build Progressive Web Apps with Go and WebAssembly — A framework for building Go-powered PWAs that uses Go’s standard http approach for the backend and adds a declarative syntax so you can write component-based UIs in Go itself.

Maxence Charrière

🎵 lofimusic.app is mentioned as an example of a site built on go-app.

grdpwasm: A Go WASM-Powered RDP Client for the Web — A browser-based implementation of an RDP (Microsoft's Remote Desktop Protocol) client in Go that's compiled to WebAssembly.

Hajime Nakagami

graphql-go v1.10.0 – GraphQL library now implementing the official GraphQL September 2025 spec.
Dasel 3.10 – CLI tool and Go library for working with JSON, YAML, TOML, XML, CSV, HCL, and INI files.
🖼️ Native WebP for Go 1.3 – Go-based native WebP encoder with no libwebp dependency.
urfave/cli 3.9 – Popular package for building command line tools in a declarative fashion.
Caddy Defender 0.10.1 – Caddy module to block or manipulate requests originating from AIs or cloud services.
🔒 Lego 5.0 – Let's Encrypt client and ACME library. There are more details in this blog post.
Ark 0.8 – Archetype-based Entity Component System (ECS) for Go.
wgpu v0.28.0 – Pure Go WebGPU Implementation.

📰 Classifieds

CodeRabbit: Your team's second brain. Now in Slack. One agent for your entire SDLC to keep context and cut review time. Trusted by 6M+ repos.

Compose Claude Code, Codex & Gemini as one harness — agents as http.Handlers. Native Go SDK. agentfield.ai/github

11 security fixes land in Go

Fri, 8 May 2026 00:00:00 +0000

#600 — May 8, 2026

Read the Web Version

Go Weekly

Go 1.26.3 and Go 1.25.10 Released with 11 Security Fixes — The headline issue is a module-proxy checksum bypass that lets untrusted proxies serve altered modules and Go toolchains, but areas as diverse as net/mail, go bug, net/http and html/template also get fixes. The proxy bug was found by an LLM, and over on Bluesky, Russ Cox apologized for its long-term presence.

Go Security Team

Azure HorizonDB at POSETTE: An Event for Postgres 2026 — Explore 44 talks about Azure HorizonDB, PostgreSQL-backed app development, Postgres performance & AI, Postgres 19 and more at POSETTE 2026, a free & virtual developer event, happening 16-18 Jun. Don’t miss your favorites - use Add to Calendar.

Microsoft | AMD sponsor

How Figma Built the Bouncer It Needed for Postgres in Go — Figma’s database team built their own Postgres connection pooler in Go on top of jackc/pgx and backpressure. It’s not open source (yet) but they go deep into the design here, complete with plentiful illustrations.

He, Goh, and Baid (Figma)

THREE GO PROPOSALS:

Felix Geisendörfer has proposed adding an rss profile type to runtime/pprof to broaden the view of overall physical memory usage.
Cherry Mui proposed enabling AMD64 architecture-specific SIMD intrinsics by default. There's still work to do, though, so it's not going to happen till Go 1.28.
Neal Patel has suggested go doc gets a -test option to include symbols from test files in documentation, such as may be useful for LLM agents.

Notes From Optimizing CPU-Bound Go Hot Paths — Lessons learned from optimizing CPU-bound hot paths while porting Brotli to pure Go, including how Go’s abstractions can impact performance in hot loops, what does and doesn’t get inlined, and some workarounds.

Andrii Berezhynskyi

One Database. Zero Pipelines. Full Postgres — Extend Postgres: hypertables, 95% compression, continuous aggregates. Analytics on live data. $1000 credit to start.

Tiger Data (creators of TimescaleDB) sponsor

📄 Hoisting Wire Plumbing Out of Your Go Handlers – Write your Go handler plumbing once, not once per endpoint. Redowan Delowar

📄 A Gopher Meets a Crab – A Go developer's tale of spending time trying to "fit Rust into a Go-shaped brain." Paul Hinze

🛠 Code & Tools

Solod v0.1: Go Ergonomics, Practical Stdlib, Native C Interop — For the past few months, Anton has been working on this system-level language with a Go syntax and no runtime. v0.1 has ports of key parts of the stdlib like io, bytes, fmt, os, time, and strings. This post includes benchmarks and examples, including how Solod can interface with SQLite.

Anton Zhiyanov

💡 There are some parallels in the Ruby world, where Ruby's creator, Matz, is working on Spinel, a compiler that similarly compiles a subset of Ruby to C.

Boring: A Single-Binary SSH Tunnel Manager — An SSH tunnel manager that "just works": single binary, TOML config, ssh_config compatibility, automatic reconnects, and a TUI for starting/stopping tunnels on demand.

Florian Becker

mvm: A Fresh Take on an 'Interpreter' for Go — Six years ago we first featured yaegi (Yaegi is Another Elegant Go Interpreter), a Go interpreter suitable for embedding into other apps. mvm, from the creator of yaegi, is a new take on the idea, instead compiling Go to bytecode for a VM to run.

Marc Vertes

💡 There's a web-based playground where you can give mvm a spin.

go-githubapp: A Go Library for Building GitHub Apps — A simple framework for building GitHub Apps that handle GitHub webhooks.

Palantir

📷 imagemeta v1.0 – Extract EXIF and XMP metadata from JPEG, HEIC, AVIF, TIFF and RAW camera images.
gotreesitter 0.16 – Pure-Go tree-sitter runtime (no Cgo). v0.16 adds native UTF-16 parsing/editing.
postgresparser 1.2 – ANTLR-based pure-Go PostgreSQL-dialect SQL parser.
go-github 86.0 – Go client library for GitHub's REST API (v3).

📰 Classifieds

CodeRabbit: Your team's second brain. Now in Slack. One agent for your entire SDLC to keep context and cut review time. Trusted by 6M+ repos.

⚙️ Go finally has an AI agent framework that isn't a Python port. Agents as http.Handlers, orchestrate LLMs & Claude Code. Open source. agentfield.ai.