golang

Go's October 8 point releases include security fixes to the go command, crypto/tls, html/template, net/http, net/textproto and os; Go's vulnerability database details four of the CVEs.

Go 1.27 reached general availability on August 19, 2026, finalizing generic methods and shipping encoding/json/v2, crypto/mldsa, and new go fix modernizers.

Go 1.27's second release candidate fixes an os.Root symlink escape and a crypto/tls Encrypted Client Hello privacy leak, alongside the language's first generic methods.

The Go team published a formal REST API for pkg.go.dev on May 21, giving tool authors and IDE integrations a stable, versioned interface to module metadata, documentation, symbols, and vulnerability data.

Go 1.26 ships with the Green Tea garbage collector enabled by default, replacing the object-centric mark-sweep algorithm with a page-level scanner that reduces GC CPU costs by 10 to 40 percent in real-world workloads.