Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion) in gogs.io/gogs. NOTE: The source advisory for this report contains additional versions
All of today's Golang news, in one place
GoDaily collects, ranks and summarises Go stories from 31 sources — releases, proposals, security advisories, articles and discussions. Read it as a daily email, a live feed, or RSS.
Join 255 Go developers. Free forever. No spam. Unsubscribe any time.
Hot in Go right now
The same pipeline that builds the newsletter, live on the web. Every Golang story we've collected — searchable, filterable, updated daily.
Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster in go.temporal.io/server
Free5GC AMF is vulnerable to DoS through its HandleRegistrationComplete function in github.com/free5gc/amf
ZITADEL: Missing client id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation) in github.com/zitadel/zitadel
Mattermost doesn't validate the X-Requested-With header on the burn-on-read reveal endpoint in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional ve
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber in github.com/ellanetworks/core
The Golang newsletter that
does the reading for you
One short read covers what the Go community shipped, debated and starred in the last 24 hours.
29 sources. Zero tabs to babysit.
GoDaily watches everywhere Go developers actually talk, then aggregates, deduplicates and ranks the day's best Golang news.










What landed in today's Go digest
A peek at the most recent issue. Subscribe to get the full thing in your inbox, or read every story in the live feed.
Every issue, on demand
Catch up on any past digest. Each one fully linked and readable.
What lands in your inbox
A clean, readable digest. No ads, no cruft. Just the Go news worth your time.

A proposal lands to add a slog.Handler to the standard library that writes through testing.TB's Output method, so test logs end up where the test framework expects them rather than scattered across stderr. Small surface, but the kind of papercut that quietly accumulates across a codebase.
Over on r/golang, a thread asks what people are actually building with all the agent frameworks that have dominated Go conference schedules for two years running, which is a fair question to put on the table. Adjacent to that, a golang-nuts post pitches a Trivy-based security standard aimed at the reality of Go services that are increasingly AI-generated.
On the writing side, a walkthrough of an in-house API gateway called Conduit covers stitching three microservices with mismatched auth behind one public endpoint, and a production post-mortem revisits the goroutine leak pattern that keeps showing up in services whose dashboards look fine right up until they don't.
Proposal Details Summary Add a slog.Handler to the standard library whose log output is written to a testing.TB via its Output() io.Writer method, so
Pretty much every Go conference in the last two years has had at least one talk on how to build agents from scratch, and then another one on which framework to use. I am curious about two things: - Mo
Golang imports and suggestions are loading very slowly on vscode It says running code actions and formatters.. and keeps running for 5-10 sec Also says Getting code actions from Go Anyone having any a
Hi gophers, I've been thinking about how AI code generation changes our security assumptions. In 2026, a typical Go service has 60-80% AI-generated code. The dependency tree isn't curated by humans an
I'm using pflags and viper modules for load configuration information from the command line, environment. I'm loading config from the command line (pflags) , a yaml file (viper), and env variables (vi
There are some changes I quite like from editions, like the explicit field presence change is extremely welcome, as it will more easily allow things RPC methods in gRPC to only update fields which are
I have made a SEO & content generation tool in go but the problem is it's fully local and it has an embedded server and also uses go rod to scrape google bing and store it in sqlite db. now I want to
Three microservices, two incompatible auth models, one public endpoint, and a Go gateway that turned...
What is an Array in Go? In Go, an array is a fixed-size, ordered set of values with the...
A few weeks ago, I wrote about why I was looking for a new language beyond PHP, and why I eventually chose Go. When I wrote that piece, I… Continue reading on Medium »
It’s 2 AM. PagerDuty fires. Your server’s getting hammered. You SSH in and do what every network engineer has done since the dawn of time. Continue reading on Medium »
The monitoring dashboard looked fine. Continue reading on Level Up Coding »
very strong golang Minecraft bodyguard viral shorts minecraft technogamerz lapatasmpapplication BlockMaster ...
https://www.develow.com/problems/go-intro-structs-json we make apps for real world problems.
started with basic CRUD operations… Now I'm building something more practical: an AI Automation Server using Golang on ...
Build a Wallet App with Go – EP12: Swagger & OpenAPI Documentation In Episode 12, we integrate Swagger/OpenAPI into ...
https://github.com/thymadona/golang-concurrency-redis.

togo ships a Go backend and React frontend as a single binary — a Laravel-artisan-grade CLI for the Go + sqlc + Atlas + React stack. Co-authored-by: Claude Opus 4.8 (1M context)
Open-Source Phishing Toolkit
OCI Image Format
The Go language implementation of gRPC. HTTP/2 based RPC





