Go: Certificate Distrust, Shift Fixes and Faster Libraries
Go blocked untrusted certificate intermediates for CVE-2026-111943 and tightened encrypted hello checks, while fixing long-standing shift type-checker edges and cutting allocations in regexp and base64.
Duration: PT2M30S
Episode overview
This episode is a short developer briefing from Go.
It explains recent repository work in plain language.
- Show: Go
- Published: 2026-10-20T13:13:24Z
- Audio duration: PT2M30S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning, it's Tuesday, October 20th, 2026, and this is your Go briefing.
The through-line is correctness under the hood — blocking untrusted chains, tightening type checking, and cutting wasted work in hot libraries.
First, security. Commit 7f86f95 filters a set of intermediate certificates from verification chains, identified by hash, fixing C V E 2026-111943. For developers, Verify now fails closed on those chains — no code change needed, but expect connection failures if you depend on affected intermediates. Related, commit…
Second, the type checker gets more precise on shifts. Three commits from Robert Griesemer address long-standing edge cases: commit c8abe73 corrects ordering so oversized non-constant shift counts are caught, commit cd46a98 relaxes an overly aggressive check on shifted floats on the left-hand side, and commit 2c02670…
Third, free performance in the standard library. P R 82364 stops padding capture slots for whole-match iterators in the regular expression package, cutting allocations in one reported case from 50 to 10. P R 82340 speeds up base 64 encoding by tuning slice capacity to help the compiler, with no change in allocations.
Also notable: commit c b…
Nearby episodes from Go
- Compiler Savings, Fuzz Correctness, and Callback Speed
- Weekly Recap - Concurrency Fixes, Secure Networking, and Faster Matching
- Silent Failures and Signing Speedups
- Concurrency Fixes and ARM Vector Push
- HTTP Security Fix and Runtime Cleanup
- Syscall Boundaries, CGO Compatibility, and RISC-V Speedups
- Vector Ops Push and Mac Debug Switch
- Regexp Speedup, HTTP Fixes, Scale Stability