flag: add All iterators and Flag.IsSet
Read on GitHub Proposal Details The flag package currently has Visit and VisitAll iterators, but unfortunately, the iterators don't return bool, so they aren't compa
Issue #55
Dgraph leaks admin tokens via /debug/vars, flag package gets iterators
The Dgraph advisory is the one to actually go read: the /debug/vars endpoint on Alpha hands out the administrator's auth token to any unauthenticated caller, which is about as bad as a debug endpoint gets. On the language side, the flag package is finally getting range-compatible All iterators plus a Flag.IsSet method, closing a small but long-standing papercut, and there is a separate blanket approval landing for adding String and GoString methods to existing types without further review. Elsewhere the golang-nuts moderators are openly asking what to do about the steady trickle of AI-written posts to the list, which feels like a conversation every mailing list is about to have.
Friday, July 24, 2026 · Issue #55
🐿️ Dgraph leaks admin tokens via /debug/vars, flag package gets iterators
The Dgraph advisory is the one to actually go read: the /debug/vars endpoint on Alpha hands out the administrator's auth token to any unauthenticated caller, which is about as bad as a debug endpoint gets. On the language side, the flag package is finally getting range-compatible All iterators plus a Flag.IsSet method, closing a small but long-standing papercut, and there is a separate blanket approval landing for adding String and GoString methods to existing types without further review. Elsewhere the golang-nuts moderators are openly asking what to do about the steady trickle of AI-written posts to the list, which feels like a conversation every mailing list is about to have.
Accepted Proposals 2
proposal: blanket approval for String and GoString methods
Read on GitHub Proposal Details This is a meta-proposal. I propose that any change that merely adds a String or GoString method to an existing type, and makes only v
Proposals 4
proposal: cmd/compile: add `GOEXPERIMENT=2pointers-closures`
Read on GitHub Proposal Details Add a GOEXPERIMENT 2pointers-closures which changes unsafe.Sizeof(func(){}) from unsafe.Sizeof(uintptr(0)) to unsafe.Sizeof(uintptr(0
proposal: gomod: Should support include.d/ style additions
Read on GitHub Proposal Details I'm working on an open source project. Unfortunately there are a few components which I can't release publicly. They're developed in
proposal: plugin: The plugin system should import from embed
Read on GitHub Proposal Details The plugin system https://pkg.go.dev/plugin only supports opening from a file on disk. This is inconvenient if we want to distribute
proposal: x/sys/unix: export AnyToSockaddr
Read on GitHub Proposal Details There is a use case in proposal https://github.com/golang/go/issues/80434 for allowing callers to convert a raw socket address to a S
Discussions 6
NATS workshops are available on-demand (NATS written in Go)
Read on Reddit Disclosure: I work at Synadia (the company behind NATS, which is a pure-Go project). Sharing because these are free and might be useful to Go folks working with messaging/streaming. We ran a set of ha
TIL there is a very longstanding attempt to make something similar to MS Access
Read on Mastodon TIL there is a very longstanding attempt to make something similar to MS Access and Delphi (so-called "integrated application platforms"), but OpenSource . It's called "Suneido". It has several strong
Posting AI-written articles to the list?
Read on Golang Nuts Hi list moderators: Is the posting articles to the Go Nuts list that were clearly written by AI encouraged or frowned upon? I ask because I notice there have been repeated articles posted to the list
The UI Kit for templ
Read on Lobsters Beautifully designed components that you can copy and paste into your apps. Built with templ, Tailwind CSS, and Vanilla JS.
We found an error that looks too obvious to slip into prod, yet it still appears in real Go projects
Read on Reddit We're building a static analyzer for Go, and we just added a new rule to catch cases where the function gets used as an index. We almost didn't bother finishing it, as it felt like a made-up error tha
Articles 5
Tried building GitHub's search box in Go
Read on Dev.to Hello, I'm Maneshwar. I'm building git-lrc, a Micro AI code reviewer that runs on every commit. It is...
Slices Beyond the Basics
Read on Dev.to Hey Techie! 🌸 Welcome to my Go series! I'll be sharing what I'm learning in ways that make...
Introducing Aurora — The Fastest LLM Gateway for Your apps
Read on Dev.to Every LLM provider has a different API, different SDK, different auth. Managing keys and endpoints...
The data model I ended up with after trying to publish one post everywhere
Read on Dev.to A social post looks like a string until you try to send it to more than one platform. That was...
Build a Terraform provider for your side project's API (it's smaller than you think)
Read on Dev.to Writing a Terraform provider sounds like a big-company activity, something HashiCorp partners do with...
Videos 5
Testing in Go Is Easier Than You Think | Golang for Devs
Read on YouTube Full overview of unit testing in Go with the native testing package. ============================== Other Resources ...
089: Saved by a bug
Read on go podcast() We're back to audio. Sorry, I'm not having enough time to write a proper desription this week.
Proofpoint Hiring Backend Golang Developer 2026 🔥 | Remote | Freshers Apply | Bengaluru🎓
Read on YouTube https://youtu.be/bswBl6IpWmQ?si=Mb9OGJ1JRLpnpOlJ Proofpoint Hiring Backend Golang Developer 2026 | Remote ...
🔴 #day98 Coding a SQL Database Management Tool in Golang - Modify configs | Live Coding | Testing
Read on YouTube day98 Coding a SQL Database Management Tool in Golang | Live Coding | Testing https://github.com/biisal/rowsql Today we're ...
Golang Microservices Full Course #41 - Object Storage MinIO for Outbox Archiving
Read on YouTube Build a Wallet App with Go – EP41: Transactional Outbox Archiving with MinIO PR Github ...
Trending 1
ava-labs/avalanchego
Read on GitHub Trending Go implementation of an Avalanche node.
Security 3
Unauthenticated admin token disclosure via /debug/vars in github.com/dgraph-io/dgraph
Read on Go Vulnerabilities The /debug/vars endpoint in Dgraph Alpha discloses the administrator's authentication token without requiring authentication. This allows an unauthenticated remote attacker to obtain the token and gai
Unauthenticated OIDC login in nebula-mesh allows unbounded memory allocation in github.com/forgekeep/nebula-mesh
Read on Go Vulnerabilities When OIDC is enabled, the login endpoint is reachable without authentication and is registered outside the rate-limited auth routes. Every request creates a fresh random OIDC state value and stores it
Insecure enrollment token TTL in nebula-mesh in github.com/forgekeep/nebula-mesh
Read on Go Vulnerabilities The nebula-mesh Web UI host creation ignores the configured enrollment token TTL and instead mints 24-hour bearer enrollment tokens. This can lead to tokens remaining valid for longer than intended, i
Jobs 1
