How to use the `tools.go` pattern to source-track your Go tool dependencies, but without polluting your top-level `go.mod`.| Jamie Tanna | Software Engineer
The Certificate Transparency ecosystem has been improving transparency for the web PKI since 2013. It helps make clear exactly what certificates each certificate authority has issued and makes sure errors or compromises of certificate authorities are detectable. Let’s Encrypt participates in CT both as a certificate issuer and as a log operator. For the past year, we’ve also been running an experiment to help validate a next-generation design for Certificate Transparency logs.| letsencrypt.org
Documentation| go.dev
When you’re developing modules to publish for others to use, you can help ensure| go.dev
本文永久链接 - https://tonybai.com/2023/09/10/understand-go-forward-compatibility-and-toolchain-rule Go语言在发展演进过程中一直十分注重向后兼容性(backward compatibility)，在Go 1.0版本发布之初就发布| tonybai.com
An example of how to reduce the size of a Go module's dependencies by taking advanage of Go module pruning.| Jamie Tanna | Software Engineer
Documentation| go.dev
go.mod file reference| go.dev
I’ve been spending some time on CI improvements at work recently, mostly around cutting down how long things take.| danp.net
Carson Gross explores the concept of 'vendoring' in software development, where external project sources are copied directly into a project. He covers the benefits of vendoring, such as improved visibility and control over dependencies, and discusses challenges like transitive dependencies and the culture of dependency in modern software development. He also contrasts vendoring with modern dependency management tools, and considers the potential for vendor-first dependency managers to combine...| htmx.org
本文永久链接 - https://tonybai.com/2025/01/14/understand-go-and-toolchain-in-go-dot-mod Go语言自诞生以来，就一直将向后兼容性作为其核心理念之一。Go1兼容性承诺确保了为Go1.0编写的代码能够在后续的Go1.x| tonybai.com
Why I'm very excited about `go tool` landing in Go 1.24.| Jamie Tanna | Software Engineer
In this article, we clarify the Golang security patching cycle. You'll learn how to identify vulnerabilities in your Go code and Go binaries and gain the insight needed to assess if these issues impact your application and pose security risks.| Jakub Jarosz
Managing dependencies| go.dev
GitHub "Actions" Are An Impending Security Disaster| cedwards.xyz
A post outlining my journey into Rust, and how I reimplemented the server that powers this very website in Rust, then benchmarked both the old and new implementation with K6, investigated a performance issue with Parca and then automated the whole lot using Nix!| jnsgr.uk
go run bash-script@latest| blog.howardjohn.info
TL;DR ¶ I’ve just released jub0bs/cors, a new CORS middleware library for Go, perhaps the best one yet. It has some advantages over the more popular rs/cors library, including a simpler API, better documentation, extensive configuration validation, a useful debug mode, stronger performance guarantees. Here is a representative example of client code: package main import ( "io" "log" "net/http" "github.com/jub0bs/cors" ) func main() { mux := http.NewServeMux() mux.HandleFunc("GET /hello", ha...| jub0bs.com
Go tooling and design help mitigate supply chain attacks at various stages.| go.dev
A proposal for an additional level of name uniqueness for Postgres extension packaging and distribution, based on URIs.| ❖ Just a Theory
uv is an extremely fast Python package installer and resolver, designed as a drop-in alternative to pip and pip-tools.| astral.sh
The Go package ecosystem uses distributed publishing to release modules without authentication or uploads. Could we do something similar for Postgres extensions?| ❖ Just a Theory
Go 1.18 Release Notes| go.dev
Go 1.16 Release Notes| go.dev
最近のGoには、関数やパッケージを非推奨と扱う方法があります。まとまっていると便利かなと思うので、種類ごとにまとめてみました。GoDocコメントを多用するので、GoDocを書き慣れていない場合は以下も参考にしてください。 blog.lufia.org 関数と型を非推奨にする 関数コメントに、// Deprecated: ではじまる段落を追加します。 // Parse parses a string of the form =. // // Deprecated: U...| Plan 9とGo言語のブログ
Cold-blooded software| dubroy.com
How to write and publish modules for use as dependencies.| go.dev
Documentation| go.dev
Starting a two week vacation today, so I’ve planned a small project: a Go-specific version of ctags. I’ve used ctags in the past to navigate a medium-sized Go monorepo, but there were some pain points. Re-indexing usually took about a minute, and, at least by default, ctags doesn’t search the standard library or Go module dependencies. I’m imagining a tool that’s easy to use from the CLI as well as from within an editor like vim or aretext.| devnonsense.com
Overview ¶| pkg.go.dev
An introduction to the basic operations needed to get started with Go modules.| go.dev
Learn about Go workspaces and some of the workflows they enable.| go.dev