Dmitri Shuralyov

Dmitri Shuralyov

@dmitri.shuralyov.com

I pursue insight, then make things simpler and better. I enjoy writing correct, high-quality Go code. Minimalist.

104 followers2 following18 posts

Dmitri Shuralyov reposted

Staticcheck 2026.2 has just been released, and unfortunately there is already a 2026.2.1 on its way to fix a false positive. Now would be a great time to give 2026.2 a spin and report any bugs and false positives of your own so they can be part of 2026.2.1.

Dmitri Shuralyov reposted

Generic methods! encoding/json/v2! goroutine leak profiles! Dare I say this is the best Go release yet?

Go@golang.org

🎊 Go 1.27.0 is released! 🗒️ Release notes: https://go.dev/doc/go1.27 📦 Download: https://go.dev/dl/#go1.27.0 #golang

Dmitri Shuralyov reposted

After about 4 years in, I am still making games in #golang with #ebitengine My next game will use the same engine too #gamedev #indiedev

Dmitri Shuralyov reposted

Dependabot security alerts have terrible signal-to-noise ratio, especially for Go vulns. That hurts security! Just turn it off and set up a pair of scheduled GitHub Actions, one running govulncheck and the other running CI with the latest version of your deps. Less work, less risk, better results!

words.filippo.ioTurn Dependabot OffI recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.

Dmitri Shuralyov reposted

Related #golang PSA: Gophers often mistakenly put a -u in 'go get -u foo', when they would have been better off with just 'go get foo'. 'go get foo' says to upgrade foo itself. It's shorthand for 'go get foo@upgrade' 'go get -u foo' says to *also* upgrade all the direct and indirect deps of foo.

Filippo Valsorda@filippo.abyssdomain.expert

PSA: go.sum is not a lockfile. You never need to look at go.sum. go.mod has everything you need.

Dmitri Shuralyov reposted

Using an age keyserver as a demo, this article demonstrates how to add a transparency log to a centralized service step-by-step. We use Tessera for the tlog, VRFs for privacy, and the Witness Network. It all takes just 500 lines to integrate! The result of years of work making tlogs accessible.

words.filippo.ioBuilding a Transparent KeyserverWe apply a transparency log to a centralized keyserver step-by-step, in less than 500 lines, with privacy protections, anti-poisoning, and witness cosigning.

Dmitri Shuralyov reposted

Apple takes CONTROL! You will soon be able to enter the Oldest House on iPhone, iPad, and Apple Vision Pro alongside Mac. Play with a game controller, or tap into the action with touch controls. Discover a world unknown when Control arrives on these platforms in early 2026. #ControlRemedy #RMD30

Dmitri Shuralyov reposted

To implement robust mitigations across Geomys, I did a survey of open source project compromises in 2024/2025. Three root causes dominate: phishing, control handoff, and unsafe GitHub Actions triggers. All three can be systematically avoided. words.filippo.io/compromise-s...

words.filippo.ioA Retrospective Survey of 2024/2025 Open Source Supply Chain CompromisesProject compromises have common root causes we can mitigate: phishing, control handoff, and unsafe GitHub Actions triggers.

Dmitri Shuralyov reposted

Go's execution tracer is a woefully underutilized tool. It contains tons of information about what is happening at any given moment that you won't get with a profile. In addition to showing flight recording capabilities, this post provides a nice example of how to use tracing to diagnose a problem.

Go@golang.org

“Flight Recorder in Go 1.25” by Carlos Amedee and Michael Knyszek — https://go.dev/blog/flight-recorder #golang

Dmitri Shuralyov reposted

Heading home from #GopherCon 2025 in NYC. As usual, many people asked how to get one of the amazing Go gopher Hawaiian shirts by Renee French. I've posted the details at github.com/rsc/gophersh.... (I know one person who has made pajama pants with the pattern. Socks might be nice too.) Enjoy!

Dmitri Shuralyov reposted

WebGPU/WebXR integration is ready for developers to start testing in Chrome canary! Available on Windows and Android with a couple of small example pages to get you started. Please give it a try, file bugs, and give us feedback! #WebGPU #WebXR

toji.devExperimenting with WebGPU in WebXRFor the last few months I’ve been working on implementing experimental support for WebGPU/WebXR integration in Chrome, and now it’s ready for developers to try on Windows and Android!