pkgsite to list interface implementers, fasthttp path bypass

The accepted proposal for pkgsite to list types that satisfy an interface within its package finally moves forward after years in the issue tracker, closing a long-standing gap in how the docs surface relationships between types. On the security side, fasthttp before 1.70.0 has an authorization bypass in ServeFile and ServeFS via double-encoded paths, which is worth checking against anything sitting behind a permissive router. Elsewhere, a piece arguing that Go 1.26 iterators have turned the language into functional spaghetti is making the rounds, and a look back at four years of generics claims 80% adoption at the cost of 15% slower builds.