~golangweekly | Bookmarks (146)

Eliminating Shadow Access: The Hidden Dangers of SSH and API Keys — Static keys create hidden security risks. Learn how to replace them with dynamic, identity-based access. Register now!

go-taskflow: A Taskflow-Like DAG Task Execution Framework — A general-purpose task-parallel framework for Go, suitable for complex dependency management in concurrent tasks.

sturdyc: Caching Library with Advanced Concurrency Features — “A sturdy gopher shielding data sources from rapidly incoming requests.” Designed to avoid cache stampedes and overloading in high throughput systems by providing non-blocking reads and sharded writes for minimal lock contention.

Go 1.24 Released — Finally, after many months of blog posts getting excited about Go 1.24’s new features, the real deal has arrived. It’s a reasonably big release too, including a lot of updates:

Reduce Your Apache Kafka Costs + Ops Burden With WarpStream — WarpStream reduces Kafka costs by 80+% by eliminating disks and interzone networking fees and features zero ops auto-scaling. It runs in your private cloud and data is stored in your object storage buckets, so raw data never leaves your environment.

Go Slice Gotchas — “Just like any other dynamically growable container structure, slices come with a few gotchas. I don’t always remember all the rules I need to be aware of, so this is an attempt to list some of the most common mistakes I’ve made at least once.”

We Replaced Our React Frontend with Go and WebAssembly — Even if you wouldn’t want to do this, it’s interesting to read about the experience of a team that has.

Zog: 'Next Gen' Schema Validation for Go — Zod is a popular TypeScript-based runtime schema validation library and Zog is a take on the same idea in Go so you can define validations and run them against values and structs. GitHub repo.

Feluda: A Tool to Analyze the Licences of Dependencies — It’s a Rust-powered project but which can be used to process the dependencies of Go, Rust or Node.js projects and return a report (or show a TUI interface) on potentially restrictive licenses that apply.

🔊 volume-go: A Cross-Platform Way to Control Sound Volume — Leaning on a different technique for each OS, it supports macOS, Linux, and Windows. If you want it wrapped up into a nice Go TUI, Volgo is for you.

A Minesweeper Game Written in Go — A cute example of putting together a game in such a way that it not only runs on the desktop in the usual way, but can be taken to the Web too. The effects are cute, too – this is a great use of the Ebitengine game engine. The GitHub repo is certainly worth a look if...

etree 1.5: A Library to Parse and Generate XML Easily — A simple, straightforward approach to working with XML in Go, inspired by Python’s ElementTree. XML documents are represented as trees for easily traversal and you can create, import, modify and save XML. Queries can be done with a XPath-like approach.

How a Malicious Package Exploited Module Proxy Caching for Persistence — Researchers have uncovered a sophisticated supply chain attack exploiting both typosquatting and then Go’s module proxying caching to remain undetected for years. It’s worth understanding the mechanism behind this in case you run into it yourself.

Proposal: math/rand/v2 Worked, Let's Do sync/v2! — Creating ‘v2’ versions of standard packages is Go’s compromise for modernization vs stability. With the evolution of math/rand a success, Ian thinks synchronization primitives are due an upgrade too. Much of the value here comes from a month’s worth of discussion, including people’s discontent over the ‘v2’ approach (outlined further here).

Upcoming Workshop on Building Backend Web Apps in Go — Join us for a two day workshop (either online or in person) and develop your Go know-how. We'll focus on using Go to build backend web apps, along with learning Go data structures, interfaces, how to write unit tests, and more.

Go Programs Freezing When Launched by Steam — Ebitengine’s lead developer reported an unusual bug to the Steam team – Go programs (e.g. games) launched by the popular Steam game launcher were failing due to Steam interfering with Go’s runtime in some way. This has since become a bug being discussed on the Go repo with some workarounds but no full resolution yet.

httptap: View HTTP/HTTPS Requests Made by Any Linux Program — It uses Linux-only network namespaces for now, but this is a Go-powered process-scoped HTTP tracer you can run without root privileges. It even decrypts TLS traffic by generating a CA on the fly. Handy for debugging or seeing if dependencies or apps are ‘phoning home,’ perhaps..

How to Release to Homebrew with GoReleaser, GitHub Actions and Semantic Release — The steps involved in automating the release of a Go project (maybe your new command line tool or TUI?) that’s available via Homebrew (as most commonly used on macOS).

Product Management Is Broken. Engineers Can Fix It — How redefining how PMs and engineers work together helped PostHog optimize everything they do for speed and autonomy.

Go 1.24's go tool is One of the Best Additions in Years — Go 1.24 isn’t even fully here yet (though rc2 is out) and people are already very excited. One major enhancement is the new go tool command and tool directive in go.mod, which simplifies handling dependencies for dev-time tooling and improves performance by caching runs and reducing dependency bloat.

Maps are Faster in Go 1.24 — It’s thanks to so-called Swiss Tables and you don’t need to make any changes to benefit from the new implementation. Just upgrading to Go 1.24 will unlock the gains.

Proposal: A Way to Reduce Error Handling Boilerplate with ? — A proposal to streamline error handling using a ? operator. This new syntax could reduce boilerplate by optionally handling errors and returning early or executing an error handling block.

Keep Your Apps Fast and Error-Free with Honeybadger — Honeybadger helps you fix errors, eliminate performance bottlenecks, and dig into the details faster than ever before. With support for Go, Ruby, and 8 other languages, it’s the best way to gain real-time insights into your application’s health and performance.