Targeting Go 1.28 — go list ... in module mode almost never (or maybe just plain never!) does what a user expects it to do. It tries to list all the packages in all the m
Accepted: `go list ./...` in module mode heads for the exit in Go 1.28
The Go team has accepted a proposal to disallow `go list ./...` in module mode, targeting Go 1.28, on the grounds that it almost never does what anyone actually wants. On the security side, an SSH knownhosts auth-bypass around unenforced @revoked CA keys in `x/crypto` is the one to patch, with a separate memory-exhaustion issue in `x/image` VP8L decoding rounding out the day's advisories. Elsewhere, a thread on keeping detached background goroutines alive past shutdown is a decent read for anyone still reaching for `context.WithoutCancel` and hoping for the best.

The Go team has accepted a proposal to disallow `go list ./...` in module mode, targeting Go 1.28, on the grounds that it almost never does what anyone actually wants. On the security side, an SSH knownhosts auth-bypass around unenforced @revoked CA keys in `x/crypto` is the one to patch, with a separate memory-exhaustion issue in `x/image` VP8L decoding rounding out the day's advisories. Elsewhere, a thread on keeping detached background goroutines alive past shutdown is a decent read for anyone still reaching for `context.WithoutCancel` and hoping for the best.
There is no safe way to determine if two slices overlap in memory. Knowing whether slices overlap can let you, for example, to choose a fast algorithm
Problem go test -cover tells us which code ran. It does not tell us whether the tests would fail if that code were wrong. A test can execute a boundar
Considering switching to Go since in theory to me it should have fewer vulnerabilities than other frameworks since so much is built into the stdlib and you don’t need to pull in dozens upon dozens o
Small HTTP service, nothing exotic. A couple of handlers kick off work that has to outlive the request, sending an email and writing an audit record. Since 1.21 I've been using context.WithoutCancel s
I’m primarily a Java developer. In my previous company, I worked almost exclusively with Java, and I have a good command of DSA in Java as well. I recently switched to another company where I’m wo
Configure Zed’s native Go language server and project tasks for any TinyGo target with tinygo-zed.

A writeup of the GopherCon UK 2026 conference.
Hi Gophers, I wanted to share a free tool I've been working on that might be useful to the Go community. It's called Ptero, a free AI chat platform that provides access to multiple large language mode
https://www.youtube.com/watch?v=KzdYKeAqWhY Leonardo de Moura is the Brazilian computer scientist behind the SMT solver Z3 and the Lean dependently typed programming language/proof assistant ( https:/
Join Nigeria Gophers @ Online on Sat Aug 22
Join Utah Go User Group @ Lehi, US on Tue Sep 1
This is a submission for Weekend Challenge: Dog Days Edition What I Built A game where...
The programming language that's powering the cloud revolution. Every year, developers ask the same...
Workers can die. Leaders can fail. Queues can overload. So I built the mechanisms to survive all three — and then tried to break it. Continue reading on Medium »
From zero to a structured, modular CLI with custom flags, validation, and subcommands. Continue reading on Medium »
Here’s a project that goes beneath the powerful net/http package — implementing Redis from scratch! Here’s the GitHub repo. Continue reading on Level Up Coding »
Golang Monolith Mastery Course: ...
Which programming languages are easiest for beginners — and which are the hardest? From Python and JavaScript to C, Rust, ...
A Nil Interface Isn't Always Nil An interface holding a nil pointer is not equal to nil, a bug that's crashed production systems.
The coding agent that answers to you, your model, your machine, your rules.
Cloud Cost Optimization Hub is an open-source, self-hosted platform that provides unified cost visibility and actionable recommendations across AWS, GCP, and Azure. Features include multi-cloud cost a
Contribute to futrx-com/remote.futrx development by creating an account on GitHub.
A self-hosted CPA / CLIProxyAPI management panel and AI gateway observability dashboard for requests, usage, cost, quota, failures, and account health.

Co-authored-by: matvey
VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to ca
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

