🎊 Go 1.27 Release Candidate 2 is released! 🔐 Security: Includes 2 security fixes to the standard library. 🏃‍♀️ Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📣 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.27rc2 #golang

🎊 Go 1.27 Release Candidate 1 is released! 🏃‍♂️ Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new 🔈 Announcement: https://groups.google.com/g/golang-announce/c/Cu9HkstbtpA/m/NfBgswyTBgAJ 📦 Download: https://go.dev/dl/#go1.27rc1 #golang

Here's a sneak peek at our 2026-2027 Season. The Programming Committee will be busy during the summer finalizing the details of the program and updating the calendar. You can download our program https://tdpc.ca/wp-content/uploads/2026/06/Sneak-Peek-of-TDPC-Program-2026-2027.pdf

“But it happened” is definitely worth more attention. youtu.be/tlQ7EoJDTQY?...

"But it happened."

YouTube video by Molly Rocket

youtu.be

A great time had by all at the TDPC Expert’s Eye photography outing, where we learned about Architectural photography.

👩🏽‍🔬 Go 1.26.3 and 1.25.10 are released! 🔐 Security: Includes 11 security fixes to the standard library and the toolchain. 📣 Announcement: https://groups.google.com/g/golang-announce/c/qcCIEXso47M/m/2bOHLAuTBQAJ 📦 Download: https://go.dev/dl/#go1.26.3 #golang

A bit over two years after starting to work on it... Go is officially FIPS 140-3 certified 💥 csrc.nist.gov/projects/cry... I am pretty confident Go is now one of the most—if not the most—seamless and complete FIPS 140-3 compliance solutions... with a single env var, out of the box.

After about 4 years in, I am still making games in #golang with #ebitengine My next game will use the same engine too #gamedev #indiedev

🎉 Go 1.26.1 and 1.25.8 are released! 🔏 Security: Includes security fixes for the standard library (CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142). 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.26.1 #golang

Dependabot security alerts have terrible signal-to-noise ratio, especially for Go vulns. That hurts security! Just turn it off and set up a pair of scheduled GitHub Actions, one running govulncheck and the other running CI with the latest version of your deps. Less work, less risk, better results!

Turn Dependabot Off

I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.

words.filippo.io

🎆 Go 1.26.0 is released! 🗒️ Release notes: https://go.dev/doc/go1.26 ⬇️ Download: https://go.dev/dl/#go1.26.0 #golang

🎉 Go 1.26 Release Candidate 3 is released! 🔒 Security: Includes an update for crypto/tls (CVE-2025-68121). 🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📢 Announcement: groups.google.com/g/golang-ann... ⬇️ Download: go.dev/dl/#go1.26rc3 #golang

The aurora tonight from Fairbanks, Alaska filmed in real-time (not sped up). Insane show!

🎉 Go 1.26 Release Candidate 2 is released! 🔐 Security: Includes security fixes for archive/zip, net/http, crypto/tls, cmd/go. 🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.26rc2 #golang

Related #golang PSA: Gophers often mistakenly put a -u in 'go get -u foo', when they would have been better off with just 'go get foo'. 'go get foo' says to upgrade foo itself. It's shorthand for 'go get foo@upgrade' 'go get -u foo' says to *also* upgrade all the direct and indirect deps of foo.

Filippo Valsorda@filippo.abyssdomain.expert · 7mo ago

PSA: go.sum is not a lockfile. You never need to look at go.sum. go.mod has everything you need.

Using an age keyserver as a demo, this article demonstrates how to add a transparency log to a centralized service step-by-step. We use Tessera for the tlog, VRFs for privacy, and the Witness Network. It all takes just 500 lines to integrate! The result of years of work making tlogs accessible.

Building a Transparent Keyserver

We apply a transparency log to a centralized keyserver step-by-step, in less than 500 lines, with privacy protections, anti-poisoning, and witness cosigning.

words.filippo.io

🎊 Go 1.26 Release Candidate 1 is released! 🏃‍♀️ Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new 🗣 Announcement: https://groups.google.com/g/golang-announce/c/i0ei8EKtYjc/m/h0jl7InPCwAJ ⬇️ Download: https://go.dev/dl/#go1.26rc1 #golang

“Go’s Sweet 16” by Austin Clements, for the Go team — https://go.dev/blog/16years #golang

Deep Space Exploitation is... 🚀OUT NOW!🚀 You can get it on #steam: s.team/a/3656660/ Or @itch.io: juhrjuhr.itch.io/deep-space-e... A little signal boost is greatly appreciated, so please repost, and tell your friends and cat :) #videogames #indiegames #gaming #pixelart #retro #itch

Happy to see someone outside Google rebuild/verify Go toolchains. Thanks @agwa.name! www.agwa.name/blog/post/ve... "So far, Source Spotter has successfully reproduced every toolchain since Go 1.21.0, for every architecture and operating system. As of publication time, that's 2,672 toolchains!"

Apple takes CONTROL! You will soon be able to enter the Oldest House on iPhone, iPad, and Apple Vision Pro alongside Mac. Play with a game controller, or tap into the action with touch controls. Discover a world unknown when Control arrives on these platforms in early 2026. #ControlRemedy #RMD30

To implement robust mitigations across Geomys, I did a survey of open source project compromises in 2024/2025. Three root causes dominate: phishing, control handoff, and unsafe GitHub Actions triggers. All three can be systematically avoided. words.filippo.io/compromise-s...

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

Project compromises have common root causes we can mitigate: phishing, control handoff, and unsafe GitHub Actions triggers.

words.filippo.io

🥳 Go 1.25.2 and 1.24.8 are released! 📢 Announcement: https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ 📦 Download: https://go.dev/dl/#go1.25.2 #golang

Go's execution tracer is a woefully underutilized tool. It contains tons of information about what is happening at any given moment that you won't get with a profile. In addition to showing flight recording capabilities, this post provides a nice example of how to use tracing to diagnose a problem.

Go@golang.org · 10mo ago

“Flight Recorder in Go 1.25” by Carlos Amedee and Michael Knyszek — https://go.dev/blog/flight-recorder #golang

Hi folks, it’s survey time! We’d love to learn more about how you use Go and what could be improved. Share your feedback via our annual developer survey at google.qualtrics.com/jfe/form/SV_.... It should take 10 - 20 minutes to complete, and will be open through September 30. Thank you! #golang

“A new experimental Go API for JSON” by Joe Tsai, Daniel Martí, Johan Brandhorst-Satzkorn, Roger Peppe, Chris Hines, and Damien Neil — https://go.dev/blog/jsonv2-exp #golang

🐕 Go 1.25.1 and 1.24.7 are released! 🔏 Security: Includes a security fix for net/http (CVE-2025-47910). 🗣 Announcement: https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ 📦 Download: https://go.dev/dl/#go1.25.1 #golang

My GopherCon EU talk about Swiss Table maps is now available! youtu.be/aqtIM5AK9t4

Faster Go Maps With Swiss Tables - Michael Pratt | GopherCon EU 2025

YouTube video by GopherCon Europe

youtu.be

Heading home from #GopherCon 2025 in NYC. As usual, many people asked how to get one of the amazing Go gopher Hawaiian shirts by Renee French. I've posted the details at github.com/rsc/gophersh.... (I know one person who has made pajama pants with the pattern. Socks might be nice too.) Enjoy!

Here are the slides for my "What's coming to Go 1.25" talk at #GopherConUK! #golang

What's coming in Go 1.25

What's coming in Go 1.25 GopherCon UK, 2025 - Daniel Martí @mvdan.cc

docs.google.com