Dmitri Shuralyov

$ go install golang.org/dl/go1.26.1@latest $ go1.26.1 download Downloaded 0.0% ( 0 / 64661384 bytes) ... Downloaded 50.0% (32330692 / 64661384 bytes) ... Downloaded 100.0% (64661384 / 64661384 bytes) Unpacking go1.26.1.linux-riscv64.tar.gz ... Success. You may now run 'go1.26.1' $ go1.26.1 version go version go1.26.1 linux/riscv64

🎉 Go 1.26.1 and 1.25.8 are released!

🔏 Security: Includes security fixes for the standard library (CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142).

📢 Announcement: groups.google.com/g/golang-ann...

📦 Download: go.dev/dl/#go1.26.1

#golang

Turn Dependabot Off I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.

Dependabot security alerts have terrible signal-to-noise ratio, especially for Go vulns. That hurts security!

Just turn it off and set up a pair of scheduled GitHub Actions, one running govulncheck and the other running CI with the latest version of your deps.

Less work, less risk, better results!

$ go install golang.org/dl/go1.26.0@latest $ go1.26.0 download Downloaded 0.0% ( 0 / 63102509 bytes) ... Downloaded 50.0% (31551254 / 63102509 bytes) ... Downloaded 100.0% (63102509 / 63102509 bytes) Unpacking go1.26.0.openbsd-arm64.tar.gz ... Success. You may now run 'go1.26.0' $ go1.26.0 version go version go1.26.0 openbsd/arm64

🎆 Go 1.26.0 is released!

🗒️ Release notes: https://go.dev/doc/go1.26

⬇️ Download: https://go.dev/dl/#go1.26.0

#golang

🎉 Go 1.26 Release Candidate 3 is released!

🔒 Security: Includes an update for crypto/tls (CVE-2025-68121).

🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new

📢 Announcement: groups.google.com/g/golang-ann...

⬇️ Download: go.dev/dl/#go1.26rc3

#golang

The aurora tonight from Fairbanks, Alaska filmed in real-time (not sped up). Insane show!

🎉 Go 1.26 Release Candidate 2 is released!

🔐 Security: Includes security fixes for archive/zip, net/http, crypto/tls, cmd/go.

🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new

📢 Announcement: groups.google.com/g/golang-ann...

📦 Download: go.dev/dl/#go1.26rc2

#golang

Related #golang PSA:

Gophers often mistakenly put a -u in 'go get -u foo', when they would have been better off with just 'go get foo'.

'go get foo' says to upgrade foo itself. It's shorthand for 'go get foo@upgrade'

'go get -u foo' says to *also* upgrade all the direct and indirect deps of foo.

Building a Transparent Keyserver We apply a transparency log to a centralized keyserver step-by-step, in less than 500 lines, with privacy protections, anti-poisoning, and witness cosigning.

Using an age keyserver as a demo, this article demonstrates how to add a transparency log to a centralized service step-by-step.

We use Tessera for the tlog, VRFs for privacy, and the Witness Network. It all takes just 500 lines to integrate!

The result of years of work making tlogs accessible.

$ go install golang.org/dl/go1.26rc1@latest $ go1.26rc1 download Downloaded 0.0% ( 0 / 66081079 bytes) ... Downloaded 50.0% (33040539 / 66081079 bytes) ... Downloaded 100.0% (66081079 / 66081079 bytes) Unpacking go1.26rc1.linux-s390x.tar.gz ... Success. You may now run 'go1.26rc1' $ go1.26rc1 version go version go1.26rc1 linux/s390x

🎊 Go 1.26 Release Candidate 1 is released!

🏃‍♀️ Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new

🗣 Announcement: https://groups.google.com/g/golang-announce/c/i0ei8EKtYjc/m/h0jl7InPCwAJ

⬇️ Download: https://go.dev/dl/#go1.26rc1

#golang

WebGPU in WebXR (webkit.org/blog/17640/w...), by far.

“Go’s Sweet 16” by Austin Clements, for the Go team — https://go.dev/blog/16years

#golang

Deep Space Exploitation is...

🚀OUT NOW!🚀

You can get it on #steam: s.team/a/3656660/
Or @itch.io: juhrjuhr.itch.io/deep-space-e...

A little signal boost is greatly appreciated, so please repost, and tell your friends and cat :)

#videogames #indiegames #gaming #pixelart #retro #itch

Safari 26.2 Beta Release Notes | Apple Developer Documentation Released November 4, 2025 — 26.2 beta (20623.1.12)

So happy that "Added WebGPU support for WebXR" (developer.apple.com/documentatio...) made it! Thank you!

Happy to see someone outside Google rebuild/verify Go toolchains. Thanks @agwa.name! www.agwa.name/blog/post/ve...

"So far, Source Spotter has successfully reproduced every toolchain since Go 1.21.0, for every architecture and operating system. As of publication time, that's 2,672 toolchains!"

I‘m curious, if you don’t mind sharing, what‘s your play time in hours at this point? (If you’d rather not say, no worries!)

Control Ultimate Edition key art. Jesse Faden fighting Hiss.

Apple takes CONTROL!

You will soon be able to enter the Oldest House on iPhone, iPad, and Apple Vision Pro alongside Mac. Play with a game controller, or tap into the action with touch controls.

Discover a world unknown when Control arrives on these platforms in early 2026.

#ControlRemedy #RMD30

A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises Project compromises have common root causes we can mitigate: phishing, control handoff, and unsafe GitHub Actions triggers.

To implement robust mitigations across Geomys, I did a survey of open source project compromises in 2024/2025.

Three root causes dominate: phishing, control handoff, and unsafe GitHub Actions triggers. All three can be systematically avoided.

words.filippo.io/compromise-s...

$ go install golang.org/dl/go1.25.2@latest $ go1.25.2 download Downloaded 0.0% ( 0 / 58280426 bytes) ... Downloaded 50.0% (29140213 / 58280426 bytes) ... Downloaded 100.0% (58280426 / 58280426 bytes) Unpacking go1.25.2.linux-riscv64.tar.gz ... Success. You may now run 'go1.25.2' $ go1.25.2 version go version go1.25.2 linux/riscv64

🥳 Go 1.25.2 and 1.24.8 are released!

📢 Announcement: https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ

📦 Download: https://go.dev/dl/#go1.25.2

#golang

Go's execution tracer is a woefully underutilized tool. It contains tons of information about what is happening at any given moment that you won't get with a profile.

In addition to showing flight recording capabilities, this post provides a nice example of how to use tracing to diagnose a problem.

Hi folks, it’s survey time! We’d love to learn more about how you use Go and what could be improved. Share your feedback via our annual developer survey at google.qualtrics.com/jfe/form/SV_.... It should take 10 - 20 minutes to complete, and will be open through September 30. Thank you!

#golang

“A new experimental Go API for JSON” by Joe Tsai, Daniel Martí, Johan Brandhorst-Satzkorn, Roger Peppe, Chris Hines, and Damien Neil — https://go.dev/blog/jsonv2-exp

#golang

$ go install golang.org/dl/go1.25.1@latest $ go1.25.1 download Downloaded 0.0% ( 0 / 56829270 bytes) ... Downloaded 50.0% (28414635 / 56829270 bytes) ... Downloaded 100.0% (56829270 / 56829270 bytes) Unpacking go1.25.1.netbsd-arm64.tar.gz ... Success. You may now run 'go1.25.1' $ go1.25.1 version go version go1.25.1 netbsd/arm64

🐕 Go 1.25.1 and 1.24.7 are released!

🔏 Security: Includes a security fix for net/http (CVE-2025-47910).

🗣 Announcement: https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ

📦 Download: https://go.dev/dl/#go1.25.1

#golang

Faster Go Maps With Swiss Tables - Michael Pratt | GopherCon EU 2025 YouTube video by GopherCon Europe

My GopherCon EU talk about Swiss Table maps is now available!

youtu.be/aqtIM5AK9t4

Hawaiian gopher shirt pattern.

Heading home from #GopherCon 2025 in NYC. As usual, many people asked how to get one of the amazing Go gopher Hawaiian shirts by Renee French. I've posted the details at github.com/rsc/gophersh.... (I know one person who has made pajama pants with the pattern. Socks might be nice too.) Enjoy!

What's coming in Go 1.25 What's coming in Go 1.25 GopherCon UK, 2025 - Daniel Martí @mvdan.cc

Here are the slides for my "What's coming to Go 1.25" talk at #GopherConUK!

#golang

$ go install golang.org/dl/go1.25.0@latest $ go1.25.0 download Downloaded 0.0% ( 0 / 58130695 bytes) ... Downloaded 50.0% (29065347 / 58130695 bytes) ... Downloaded 100.0% (58130695 / 58130695 bytes) Unpacking go1.25.0.freebsd-arm.tar.gz ... Success. You may now run 'go1.25.0' $ go1.25.0 version go version go1.25.0 freebsd/arm

🎊 Go 1.25.0 is released!

📝 Release notes: https://go.dev/doc/go1.25

⬇️ Download: https://go.dev/dl/#go1.25.0

#golang

Congrats! Looking forward to seeing you there!

$ go install golang.org/dl/go1.25rc3@latest $ go1.25rc3 download Downloaded 0.0% ( 0 / 58027901 bytes) ... Downloaded 50.0% (29013950 / 58027901 bytes) ... Downloaded 100.0% (58027901 / 58027901 bytes) Unpacking go1.25rc3.netbsd-386.tar.gz ... Success. You may now run 'go1.25rc3' $ go1.25rc3 version go version go1.25rc3 netbsd/386

🌞 Go 1.25 Release Candidate 3 is released!

🏖 Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new

📣 Announcement: https://groups.google.com/g/golang-announce/c/sTNnwCTjr1Y/m/tdIX-dDUAgAJ

📦 Download: https://go.dev/dl/#go1.25rc3

#golang

WebXR enhancements are still at the top of my wishlist.

After that, it'd be other WebXR improvements.

It's possible to access gamepad input from an immersive-vr session, but if I'm not mistaken no way to access external keyboard input (e.g., from a Magic Keyboard that's connected to the AVP).

Also hoping to see immersive-ar support someday.

Thank you!