Cup o' Go

Don't forget to visit cupogo dot dev, where you can find links to all the things!

Go 1.24.4 and 1.23.10 releasedCommit 4d1c255: net/http: strip sensitive proxy headers from redirect requests

This episode was sponsored by Elastic! Elastic is the company behind Elasticsearch, they help teams find, analyze, and act on their data in real-time through their Search, Observability, and Security solutions. Thanks Elastic! This episode was recorded at Elastic's offices in San Francisco during a meetup.Find info about the show, past episodes including transcripts, our swag store, Patreon link, and more at https://cupogo.dev/.

Go gets auditedBlog: Go Cryptography Security Audit by Roland Shoemaker and Filippo ValsordaDeeper dive into FIPS in Episode 89 with Alex Scheel✋ Proposal declined: x/exp/xiter: new package with iterator adapters⛺ Gophercamp video: Your code deserves better: give it a linter by Gabriel Augendre

Go Meetup in San Francisco - Sponsored by Elastic & Cup o' GoIan Lance Taylor leaves the Go teamBlog: wget to Wipeout: Malicious Go Modules Fetch Destructive PayloadBlog: Security: The Habits That Matter Most by Christoph Berger⚡ Interview with Kevin Hoffman of SparkLogsSparkLogs.comSparkLogs on DiscordKevin on LinkedInKevin by email ★ Support this podcast on Patreon ★

Thanks for listening. Check out all the links to all the things at https://cupogo.dev/.GCC 15.1 Released With Support For COBOLos: Root permits access to parent directoryGOOS=noneThe "most ergonomic" config libraryGo Meetup in San Francisco - Sponsored by Elastic & Cup o' GoLinkedIn s**tpostingLightning round"you are an expert go developer"Build your own ResponseWriter: safer HTTP in Go ★ Support this podcast on Patreon ★

Conferences and meetups

Visit https://cupogo.dev/ for store links, past episodes including transcripts, and more!Correction: Yoke _is_ a Helm replacementYour code deserves better: give it a linter! - talk in the Czech Repulic soonAccepted: waitgroup.Go Leak and Seek: A Go Runtime Mysterygo-yaml goes unmaintainedDiscussion in our Slack groupThe stdlib proposal by Shay: https://github.com/golang/go/issues/61023Lighting round:godoc.nvimNew Fyne releaseSan Francisco meetup: https://www.eventbrite.com/e/go-meetup-in-san-francisco-tickets-1307114758429 ★ Support this podcast on Patreon ★

Vulnerability in golang.org/x/netYou can't parse [X]HTML with regex.

Updates on old news:

This episode was LIVE! Even if you usually listen to this show, if you want you can check out the video on YouTube :)Visit https://cupogo.dev/ for store links, past episodes including transcripts, and more!GopherCon IsraelAccepted proposal: Clone a HashWe Replaced Our React Frontend with Go and WebAssembly from DaggerExtensible Wasm Applications with Go by Cherry MuiSQL NULLs are Weird! by Raymond TukpeLighting round:Go programs freeze when they are launched via a Steam clientLovable's rewrite From Python to GoBunster: Compile shell scripts to static binariesNVM for Windowschi drops support for Go 1.14-1.19Go 1.24.0 released ★ Support this podcast on Patreon ★

Proposals✈️ Accepted: runtime/trace: flight recording

Go 1.24RC2 releasedGo 1.23.5 & 1.22.11 released

Happy New Year, everyone!Visit cupogo.dev to buy Swag

Go 1.24rc1 is out. Start testing it!golang.org/x/net v0.33.0 released with security patches for golang.org/x/net/html

golang.org/x/crypto security updateGo 1.24 draft release notesBlog: What's missing from Golang Generics? by Nick TobeyLightning RoundBlog: Weak Pointers in Go: Why They Matter Now by Phuong LeOrchestrion: Compile-time auto-instrumentation for GoBuilding a distributed log using S3 (under 150 lines of Go)Video: Rethinking Domain-Driven Design in Go: From Myths to Reduced Project Complexity by Robert Laszczak ★ Support this podcast on Patreon ★

Go 1.23.4 and 1.22.10 releasedProposalsAccepted & implemented: testing: shuffle seed should be different when -shuffle=on and -count flag is setCLNew: cmd/vet: add check for sync.WaitGroup abuseAccepted: cmd/vet: warn about structs marked json omitemptyNew: runtime/mainthread: add mainthread.Do for mediating access to the main threadLightning Roundgithub.com/bitfield/qrand -- Quantum random numbersBlog post: I stan clearing maps, no cap by Phil Pearl ★ Support this podcast on Patreon ★

This week Jonathan and Shay go deep into FIPS, cryptography, and security, and interview Alex Scheel about it as well!ProposalsGo moves toward FIPS-140

Go 1.23.3 and 1.22.9 releasedProposalsAccepted:

IRL Go meetings

Happy Sukkot

News

No episode this week, as Shay's celebrating Rosh Hashana and John's moving countries. So enjoy this replay of our interview with John Arundel from episode 21 of the show!Interview with Go

Join us at Orca Security! New roles for Go Developers opened, hand in your CV (and tell 'em Shay sent you :) )Backend DeveloperRuntime Security ResearcherAgent DeveloperDevOps EngineerProposals

For show notes, swag store, Patreon community, and past episodes, visit cupogo.dev.Discussions & Proposals

Proposals

Go 1.23.1 & 1.22.7 released

Thanks to Jamie Tanna for joining as Co-host!Our gracious patrons support this show. Consider joining as a member, too!Conferences roundup

For Patreon, Swag, past episodes, and more, visit

For Patreon, Swag, past episodes, and more, visit https://cupogo.dev/!

News this week:

Conferences & CFPs

Go 1.22.5 & 1.21.12 releasedConferences

Visit our homepage - cupogo.dev - for links to our Patreon, Store, past episodes, and more.

Thanks, Erik Dubbelboer, John Basila, Suchith, and Hiji, for co-hosting the episode!Which GUI library to choose?Caesar, a new Go Web Framework"How to prove I am good at Go apart from having work experience?""Where should I learn Go?"Learn Go with Tests

Visit our homepage - cupogo.dev - for links to our Patreon, Swag Store, and more.Next week, on June 19th, we're doing a physical meetup! Join #amsterdam on the Gopher Slack to join up.

Go 1.22.4 & 1.21.11 releasedProposalsNew: safer file open functionsgithub.com/google/safeopen alternativeopenat man pageNew: allow range-over-func to omit iteration variablesBlog: Flaky Tests Overhaul at UberBlog: Redpanda acquires Benthos to expand its end-to-end streaming data platformInterview with Ashley JeffsTwitterLinkedInGitHubAnnouncement discussion on Hacker NewsRedpanda Connect project pagePrevious Benthos interview in Episode 27Redneck language in RedHat, cerca 1998

Go 1.22.4 & 1.21.11 coming Tuesday, June 4Community eventsGolang Atlanta meetup, June 13Cup o' Go Meetup in Amsterdam, June 19Golang Tilburg meetup, June 20Proposal accepted and implemented: new iterator functions in maps package coming in 1.23Reddit: What software shouldn't you write in Go?Blog: Blazingly Fast Shadow Stacks for Go by Felix GeisendörfBlog: Abusing Go's infrastructure by Pedro VilaçaAd breakEpisode 15, interview with Adelina Simion about her book, Test-Driven Development in GoInterview with Riccardo PinosioHugging Facehugot on GitHubONNXKnights Analytics

ProposalsAccepted: require Linux 3.17 kernel for Go 1.24Previous discussion: Episode 61Accepted: add encoding.AppendText and encoding.AppendBinaryPrevious discussion: Episode 62Accepted: add HostLayout directive type