Go: HTTP Security Fix and Runtime Cleanup

A fix stops the HTTP transport from reusing plaintext HTTP/2 connections for encrypted requests. The rest of the activity centers on Unix thread leaks and compiler and decoding performance work.

Duration: PT2M37S

Episode overview

This episode is a short developer briefing from Go.

It explains recent repository work in plain language.

  • Show: Go
  • Published: 2026-10-16T13:08:29Z
  • Audio duration: PT2M37S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Good morning, it's October 16th, 2026, and here's your Go developer briefing.

The top signal today is correctness in edge cases, led by a security fix in the HTTP transport that prevents encrypted traffic from reusing a plaintext connection.

First, HTTP reliability. PR 82258 fixes connection pooling that keyed cached HTTP/2 connections by host alone. That meant a request opened for plain HTTP could be reused for HTTPS to the same host, sending supposedly encrypted data in the clear. The fix adds the URL scheme to the pool key. In related HTTP work, PR…

Second, thread cleanup on Unix systems. Three related reports from the same contributor address leaked thread attributes. PR 82243 destroys thread attributes after thread creation in the C interop path, fixing a roughly 50-byte leak per thread on OpenBSD. Companion fixes on AIX, including PR 82247, destroy…

Third, compiler and decoding performance. Commits around the single-instruction-multiple-data toolkit clean up processor feature documentation, annotate type-level CPU requirements, and add missing mask conversions for scalable vectors on ARM. On the compiler side, one fix, commit 6ca0658, stops misclassifying…

To watch: test…

Nearby episodes from Go

  1. Concurrency Fixes and ARM Vector Push
  2. Syscall Boundaries, CGO Compatibility, and RISC-V Speedups
  3. Vector Ops Push and Mac Debug Switch
  4. Regexp Speedup, HTTP Fixes, Scale Stability
  5. Resolver Leak Fix and MIPS Timing Correction
  6. Weekly Recap - Compiler Speed and Library Correctness
  7. Compiler Ordering Fix and Linker Crash Guard
  8. Edge-Case Fixes and Compiler Gains