Go 1.27 RC3 released
Read on Go Releases Go pre-release — try it in dev and prod, and file bugs.
Issue #70
Go 1.27 RC3 lands alongside 1.26.6 and 1.25.13 security fixes
Go 1.27 Release Candidate 3 is out, carrying ten security fixes to the standard library and toolchain, and the same ten fixes have been backported into point releases 1.26.6 and 1.25.13 for anyone not yet on the RC track. The individual advisories give a sense of the shape of things: a missing ReadHeaderTimeout on the unencrypted HTTP/2 preface check in net/http, a recursion limit added to encoding/asn1 to head off stack exhaustion, and a panic parsing malformed SVCB or HTTPS records in x/net/dns/dnsmessage. Worth running RC3 in dev, and filing the bugs while the window is open.
Friday, August 14, 2026 · Issue #70
🐿️ Go 1.27 RC3 lands alongside 1.26.6 and 1.25.13 security fixes
Go 1.27 Release Candidate 3 is out, carrying ten security fixes to the standard library and toolchain, and the same ten fixes have been backported into point releases 1.26.6 and 1.25.13 for anyone not yet on the RC track. The individual advisories give a sense of the shape of things: a missing ReadHeaderTimeout on the unencrypted HTTP/2 preface check in net/http, a recursion limit added to encoding/asn1 to head off stack exhaustion, and a panic parsing malformed SVCB or HTTPS records in x/net/dns/dnsmessage. Worth running RC3 in dev, and filing the bugs while the window is open.
Releases 1
Discussions 8
Which minimal Docker images work best for Go applications?
Read on Reddit Go's static binaries make it a pretty natural fit for minimal or distroless style images, so I've been comparing options beyond the usual scratch or distroless base. There are a few Go focused minimal
🥳 Go 1
Read on Mastodon 🥳 Go 1.27 Release Candidate 3 is released! 🔐 Security: Includes 10 security fixes to the standard library and the toolchain. 🏃♀️ Run it in dev! Run it in prod! File bugs! https:// go.dev/
Robust, fast and configurable LSP for go templates
Read on Reddit If you are like me, you admire the simplicity and speed of go and go templates. The only down side has been the lack of type-safety when working inside the templates. I have been working on this vscod
[security] Go 1.26.6 and Go 1.25.13 are released
Read on Golang Nuts Hello gophers, We have just released Go versions 1.26.6 and 1.25.13, minor point releases. These releases include 10 security fixes following the security policy < https://go.dev/doc/security/policy >
[security] Go 1.27 Release Candidate 3 is released
Read on Golang Nuts Hello gophers, We have just released go1.27rc3, a release candidate version of Go 1.27. It is cut from release-branch.go1.27 at the revision tagged go1.27rc3. This release includes 10 security fixes f
[security] Vulnerabilities in golang.org/x/mod
Read on Golang Nuts Hello gophers, We have tagged version v0.40.0 of golang.org/x/mod in order to address the following security issues: x/mod/sumdb/tlog: fix transparency log tile verification bypass A malicious GOPROXY
Schema - new language for serialized data in C++/C#/Golang and Rust
Read on Hacker News The schema language: bitpacked serialization schemas compiled to C++, C , Go and Rust - mas-bandwidth/schema
Events 2
Go Meetup in San Francisco | Hosted by C1.ai
Read on Meetup Join GoSF @ San Francisco, US on Wed Aug 26
August GoMN Meetup (in-person and virtual)
Read on Meetup Join GoMN @ Minneapolis, US on Wed Aug 19
Articles 5
Why Go (Golang) Is Taking Over Modern Backend Development 🚀
Read on Dev.to "Simple. Fast. Reliable. That's why developers love Go." Every few years, a programming language...
Concurrent Resource Scheduler v1.2.3: Sharded Priority Heaps Under Concurrent Load
Read on Dev.to A deep technical look at Concurrent Resource Scheduler v1.2.3 — why it uses sharded priority heaps, how acquisition and resource lifecycle work, and what the latest Go benchmarks and release validat
PG
Read on Planet Golang Artifact Immutability as a Release Safety Primitive: Go Binary Signing, Digest Pinning, and the Promotion Pipeline
Read on Dev.to How to enforce artifact immutability across a Go microservice promotion pipeline using binary signing, OCI digest pinning, and gate-controlled promotion.
Designing a Zero-Dependency Microservice Infrastructure Engine in Pure Go
Read on Medium Inside Pranor v1.0: How 17 Core Modules, Pure-Go Assembly, and OTLP Tracing Replace Thousands of Lines of YAML Glue Code. Continue reading on Medium »
Videos 5
Slices in golang, you need to know! # #golang #softwarearchitect #techshorts #gomodules #gopractice
Read on YouTube Two slices, one silent bug. Appending to one Go slice can secretly corrupt another — and your code won't even throw an error.
Go defer Quiz: When Is x Captured?
Read on YouTube A variable changes after a defer statement. Which value will the deferred call use? Make your prediction, learn when Go evaluates ...
Basic golang course - go hkimhab
Read on YouTube Basic golang course - go hkimhab រៀន coding: rean-it.com reanit22 golang hkimhab22 hkimhab programming.
"You are a GoLang expert" — a saved assistant
Read on YouTube Custom assistants with their own system prompts, saved and reusable. Every model in one chat — GPT, Claude, Gemini, and ...
Is Go the Right Choice for High Concurrency?
Read on YouTube From the short: 'Job Go is to use for high concurrency traffic, copy handle many.' Go for high concurrency and heavy traffic ...
Trending 5
JuliusBrussee/caveman
Read on GitHub Trending 🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman
astaxie/TokenHub
Read on GitHub Trending TokenHub gives enterprises a private gateway to unify AI model access and governance, making every request controllable, traceable, and attributable.
flexprice/flexprice
Read on GitHub Trending Usage-based pricing and billing for developers 🔓 Cloud or self-hosted ⚙️ No-code UI 💰 Realtime usage metering 🎟 Credits & top-ups 🔑 Control feature access
geekjourneyx/md2wechat-skill
Read on GitHub Trending Markdown to WeChat CLI | 一键排版发布到微信公众号：支持 40+ 排版样式和专业主题 、AI 配图 、批量发布 、多账号管理
compozy/compozy
Read on GitHub Trending An operating system for AI agents. Plug in the agent CLIs you already use (Claude Code, Codex, Gemini CLI, Cursor) and they become a team: they split the work, hand tasks to each other, run automated
Security 3
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http
Read on Go Vulnerabilities When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being a
Enforce maximum recursion depth in encoding/asn1
Read on Go Vulnerabilities Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
Read on Go Vulnerabilities Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.
Social 2
🥳 Go 1.27 Release Candidate 3 is released
Read on Bluesky 🥳 Go 1.27 Release Candidate 3 is released! 🔐 Security: Includes 10 security fixes to the standard library and the toolchain. 🏃♀️ Run it in dev! Run it in prod! File bugs! go.dev/issue/new
🎊 Go 1.26.6 and 1.25.13 are released
Read on Bluesky 🎊 Go 1.26.6 and 1.25.13 are released! 🔐 Security: Includes 10 security fixes to the standard library and the toolchain. 🔈 Announcement: https://groups.google.com/g/golang-announce/c/94pEornpR
Jobs 4
Alaffia Health | Principal Engineer (TypeScript) | NYC (Hybrid) | Full-timeAlaffia Health is a Series B healthtech company in NYC fixing...
Read on HN Who's Hiring a real, expensive problem: US health plans lose billions every year to improper payments and administrative waste in claims processing. We combine clinicians with AI to catch billing errors before the
Stream | Multiple Positions | Amsterdam (NL), Skopje (North Macedonia)|Full Time | Visa SponsorshipWe’re hiring for:* Lead Data...
Read on HN Who's Hiring Engineer (Amsterdam, Netherlands) Senior React SDK Developer (Skopje, North Macedonia)At Stream, we use Go for our video SFU, chat API, Moderation and Feeds, serving high traffic from major apps like
