Go 1.27.3 and 1.26.10 ship with a security fix

Go 1.27.3 and 1.26.10 are out, carrying a single standard-library security fix, and the related change to reject certificate chains containing eight distrusted intermediate SPKIs is drawing the bulk of the discussion on the tracker. If the patch release has you poking around 1.27 features anyway, there is also an early CLI framework built around the new generic methods making the rounds on the forum.