Dmitri Shuralyov reposted
“Our Response To The eMudhra Key Disclosure Incident” by Roland Shoemaker, on behalf of the Go Security team — https://go.dev/blog/emudhra-incident #golang
Dmitri Shuralyov
@dmitri.shuralyov.com
I pursue insight, then make things simpler and better. I enjoy writing correct, high-quality Go code. Minimalist.
104 followers2 following18 posts
Dmitri Shuralyov reposted
“Our Response To The eMudhra Key Disclosure Incident” by Roland Shoemaker, on behalf of the Go Security team — https://go.dev/blog/emudhra-incident #golang
Dmitri Shuralyov reposted
The 2026 Go Developer Survey is open! Help set Go’s priorities for next year by telling us how you use Go and where it could be better. ⏱️ 10–20 minutes 📅 Open through November 3 blink.qualtrics.com/jfe/form/SV_... #golang
Dmitri Shuralyov reposted
👩🏽🔬 Go 1.27.3 and 1.26.10 are released! 🔐 Security: Includes 1 security fixes to the standard library. 🗣 Announcement: https://groups.google.com/g/golang-announce/c/66pojueaQek/m/tmWX2Pq9AgAJ 📦 Download: https://go.dev/dl/#go1.27.3 #golang
Dmitri Shuralyov reposted
JPEG XL has arrived on the web, but how does it stack up against AVIF? jakearchibald.com/2026/jpeg-xl...
Dmitri Shuralyov reposted
“Better HTTP/1 connection reuse” by Nicholas Husin and Damien Neil — https://go.dev/blog/http-connection-reuse #golang
Dmitri Shuralyov reposted
🎉 Go 1.27.2 and 1.26.9 are released! 🔐 Security: Includes 15 security fixes to the standard library and the toolchain. 📡 Announcement: https://groups.google.com/g/golang-announce/c/U2fTuyDJznI/m/bAPU-QKAAQAJ 📦 Download: https://go.dev/dl/#go1.27.2 #golang
Dmitri Shuralyov reposted
Dmitri Shuralyov reposted
“Go 1.27 is released” by Nicholas Husin, on behalf of the Go team — https://go.dev/blog/go1.27 #golang
Dmitri Shuralyov reposted
Dmitri Shuralyov reposted
🥳 Go 1.27 Release Candidate 3 is released! 🔐 Security: Includes 10 security fixes to the standard library and the toolchain. 🏃♀️ Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📣 Announcement: groups.google.com/g/golang-ann... ⬇️ Download: go.dev/dl/#go1.27rc3 #golang
Dmitri Shuralyov reposted
🎊 Go 1.27 Release Candidate 2 is released! 🔐 Security: Includes 2 security fixes to the standard library. 🏃♀️ Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📣 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.27rc2 #golang
Dmitri Shuralyov reposted
🎊 Go 1.27 Release Candidate 1 is released! 🏃♂️ Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new 🔈 Announcement: https://groups.google.com/g/golang-announce/c/Cu9HkstbtpA/m/NfBgswyTBgAJ 📦 Download: https://go.dev/dl/#go1.27rc1 #golang
Dmitri Shuralyov reposted
Here's a sneak peek at our 2026-2027 Season. The Programming Committee will be busy during the summer finalizing the details of the program and updating the calendar. You can download our program https://tdpc.ca/wp-content/uploads/2026/06/Sneak-Peek-of-TDPC-Program-2026-2027.pdf
Dmitri Shuralyov reposted
“But it happened” is definitely worth more attention. youtu.be/tlQ7EoJDTQY?...
Dmitri Shuralyov reposted
Dmitri Shuralyov reposted
👩🏽🔬 Go 1.26.3 and 1.25.10 are released! 🔐 Security: Includes 11 security fixes to the standard library and the toolchain. 📣 Announcement: https://groups.google.com/g/golang-announce/c/qcCIEXso47M/m/2bOHLAuTBQAJ 📦 Download: https://go.dev/dl/#go1.26.3 #golang
Dmitri Shuralyov reposted
A bit over two years after starting to work on it... Go is officially FIPS 140-3 certified 💥 csrc.nist.gov/projects/cry... I am pretty confident Go is now one of the most—if not the most—seamless and complete FIPS 140-3 compliance solutions... with a single env var, out of the box.
Dmitri Shuralyov reposted
Dmitri Shuralyov reposted
🎉 Go 1.26.1 and 1.25.8 are released! 🔏 Security: Includes security fixes for the standard library (CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142). 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.26.1 #golang
Dmitri Shuralyov reposted
Dependabot security alerts have terrible signal-to-noise ratio, especially for Go vulns. That hurts security! Just turn it off and set up a pair of scheduled GitHub Actions, one running govulncheck and the other running CI with the latest version of your deps. Less work, less risk, better results!
Dmitri Shuralyov reposted
🎆 Go 1.26.0 is released! 🗒️ Release notes: https://go.dev/doc/go1.26 ⬇️ Download: https://go.dev/dl/#go1.26.0 #golang
Dmitri Shuralyov reposted
🎉 Go 1.26 Release Candidate 3 is released! 🔒 Security: Includes an update for crypto/tls (CVE-2025-68121). 🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📢 Announcement: groups.google.com/g/golang-ann... ⬇️ Download: go.dev/dl/#go1.26rc3 #golang
Dmitri Shuralyov reposted
Dmitri Shuralyov reposted
🎉 Go 1.26 Release Candidate 2 is released! 🔐 Security: Includes security fixes for archive/zip, net/http, crypto/tls, cmd/go. 🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.26rc2 #golang
Dmitri Shuralyov reposted
Related #golang PSA: Gophers often mistakenly put a -u in 'go get -u foo', when they would have been better off with just 'go get foo'. 'go get foo' says to upgrade foo itself. It's shorthand for 'go get foo@upgrade' 'go get -u foo' says to *also* upgrade all the direct and indirect deps of foo.
PSA: go.sum is not a lockfile. You never need to look at go.sum. go.mod has everything you need.
Dmitri Shuralyov reposted
Using an age keyserver as a demo, this article demonstrates how to add a transparency log to a centralized service step-by-step. We use Tessera for the tlog, VRFs for privacy, and the Witness Network. It all takes just 500 lines to integrate! The result of years of work making tlogs accessible.
Dmitri Shuralyov reposted
🎊 Go 1.26 Release Candidate 1 is released! 🏃♀️ Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new 🗣 Announcement: https://groups.google.com/g/golang-announce/c/i0ei8EKtYjc/m/h0jl7InPCwAJ ⬇️ Download: https://go.dev/dl/#go1.26rc1 #golang
Dmitri Shuralyov reposted
“Go’s Sweet 16” by Austin Clements, for the Go team — https://go.dev/blog/16years #golang
Dmitri Shuralyov reposted
Deep Space Exploitation is... 🚀OUT NOW!🚀 You can get it on #steam: s.team/a/3656660/ Or @itch.io: juhrjuhr.itch.io/deep-space-e... A little signal boost is greatly appreciated, so please repost, and tell your friends and cat :) #videogames #indiegames #gaming #pixelart #retro #itch
Dmitri Shuralyov reposted
Happy to see someone outside Google rebuild/verify Go toolchains. Thanks @agwa.name! www.agwa.name/blog/post/ve... "So far, Source Spotter has successfully reproduced every toolchain since Go 1.21.0, for every architecture and operating system. As of publication time, that's 2,672 toolchains!"
Dmitri Shuralyov reposted
Dmitri Shuralyov reposted
To implement robust mitigations across Geomys, I did a survey of open source project compromises in 2024/2025. Three root causes dominate: phishing, control handoff, and unsafe GitHub Actions triggers. All three can be systematically avoided. words.filippo.io/compromise-s...
Dmitri Shuralyov reposted
🥳 Go 1.25.2 and 1.24.8 are released! 📢 Announcement: https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI/m/qZN5nc-mBgAJ 📦 Download: https://go.dev/dl/#go1.25.2 #golang
Dmitri Shuralyov reposted
Go's execution tracer is a woefully underutilized tool. It contains tons of information about what is happening at any given moment that you won't get with a profile. In addition to showing flight recording capabilities, this post provides a nice example of how to use tracing to diagnose a problem.
“Flight Recorder in Go 1.25” by Carlos Amedee and Michael Knyszek — https://go.dev/blog/flight-recorder #golang
Dmitri Shuralyov reposted
Hi folks, it’s survey time! We’d love to learn more about how you use Go and what could be improved. Share your feedback via our annual developer survey at google.qualtrics.com/jfe/form/SV_.... It should take 10 - 20 minutes to complete, and will be open through September 30. Thank you! #golang
Dmitri Shuralyov reposted
“A new experimental Go API for JSON” by Joe Tsai, Daniel Martí, Johan Brandhorst-Satzkorn, Roger Peppe, Chris Hines, and Damien Neil — https://go.dev/blog/jsonv2-exp #golang
Dmitri Shuralyov reposted
🐕 Go 1.25.1 and 1.24.7 are released! 🔏 Security: Includes a security fix for net/http (CVE-2025-47910). 🗣 Announcement: https://groups.google.com/g/golang-announce/c/PtW9VW21NPs/m/DJhMQ-m5AQAJ 📦 Download: https://go.dev/dl/#go1.25.1 #golang
Dmitri Shuralyov reposted
My GopherCon EU talk about Swiss Table maps is now available! youtu.be/aqtIM5AK9t4
Dmitri Shuralyov reposted
Heading home from #GopherCon 2025 in NYC. As usual, many people asked how to get one of the amazing Go gopher Hawaiian shirts by Renee French. I've posted the details at github.com/rsc/gophersh.... (I know one person who has made pajama pants with the pattern. Socks might be nice too.) Enjoy!
Dmitri Shuralyov reposted
Here are the slides for my "What's coming to Go 1.25" talk at #GopherConUK! #golang
Dmitri Shuralyov reposted
🎊 Go 1.25.0 is released! 📝 Release notes: https://go.dev/doc/go1.25 ⬇️ Download: https://go.dev/dl/#go1.25.0 #golang
Dmitri Shuralyov reposted
🌞 Go 1.25 Release Candidate 3 is released! 🏖 Run it in dev! Run it in prod! File bugs! https://go.dev/issue/new 📣 Announcement: https://groups.google.com/g/golang-announce/c/sTNnwCTjr1Y/m/tdIX-dDUAgAJ 📦 Download: https://go.dev/dl/#go1.25rc3 #golang
Dmitri Shuralyov reposted
NebuLeet demo is released! Check it out! #gamedev #indiegame #indiedev #pixelart #ebitengine store.steampowered.com/news/app/302...
Dmitri Shuralyov reposted
🎉 Go 1.25 Release Candidate 1 is released! 🏃♀️ Run it in dev! Run it in prod! File bugs! go.dev/issue/new 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.25rc1
Dmitri Shuralyov reposted
🥳 Go 1.24.3 and 1.23.9 are released! 🔒 Security: Includes a security fix for os (CVE-2025-22873). 📢 Announcement: groups.google.com/g/golang-ann... 📦 Download: go.dev/dl/#go1.24.3 #golang
Dmitri Shuralyov reposted
Replying to @michael.express
Please try it... 🙏 Instructions here: github.com/golang/go/is...
Dmitri Shuralyov reposted
“Goodbye core types - Hello Go as we know and love it!” by Robert Griesemer — go.dev/blog/coretypes #golang
Dmitri Shuralyov reposted
Dmitri Shuralyov reposted
WebGPU/WebXR integration is ready for developers to start testing in Chrome canary! Available on Windows and Android with a couple of small example pages to get you started. Please give it a try, file bugs, and give us feedback! #WebGPU #WebXR