net/http gets Server.MaxHeaderValueCount, Go 1.26.5 and 1.25.12 pre-announced

The accepted freeze-exception proposal for net/http adds Server.MaxHeaderValueCount (and a DefaultMaxHeaderValueCount), giving servers a way to cap how many values a single header can carry rather than leaning on MaxHeaderBytes alone. The security team has also pre-announced Go 1.26.5 and 1.25.12 for Tuesday July 7, covering private standard-library fixes, so it is a good week to have the update path warmed up. Elsewhere, a Medium piece walks through what actually changed inside Go 1.24's map implementation with Swiss tables and SIMD probing, for anyone who prefers their reading with fewer CVE identifiers in it.