💡 Using the Go + htmx + templ stack for building Go-backed webapps isn't a new idea (the so-called GoTH stack) but templUI adds an incredibly useful shadcn-like component library to the mix.

⚠️ gRPC-Go has an authorization bypass vulnerability. gRPC-Go users are encouraged to upgrade to v1.79.3 ASAP.

📄 In Praise of the etcd Codebase – “This has become my go-to whenever I’m wiring up another gRPC service at work.” Redowan Delowar

📄 How to Profile a Go App: The Complete pprof Guide – A broad guide to using the pprof toolchain to diagnose CPU bottlenecks, memory leaks, goroutines, and more. Cristian Curteanu

📄 I Think Dependency Cooldowns Would Be a Good Idea for Go Chris Siebenmann

📺 Developing a 2FA Desktop Client in Go with Wails Package Main

🛠 Code & Tools

color 1.19.0: A Color Text Output Package — It’s been over a decade since we first featured this library, now essentially the de facto choice for emitting colorized output, but as it’s a quiet week, why not celebrate Fatih’s tireless work keeping it up to date? v1.19.0 is a small bugfix and dependency update release.

Fatih Arslan

💡 Other established options in the Go PDF generation world include UniPDF (commercial), gopdf, and fpdf (and its unmaintained predecessor gofpdf).

GoDoc Live: Statically Analyze Go HTTP Services to Produce Docs — The idea is simple: your handlers already describe your API, so why not statically analyze them and extract the routes, params, request bodies, and response shapes to produce documentation? Supports Chi, Gin, and Go 1.22+ net/http routing.

nicolas ggd

• Hugo v0.158.0 – The popular Go-powered static site generator adds native bundling/transformation/minifying of CSS resources.

• pq 1.12 – Postgres driver for database/sql. Note that the next release may change the default sslmode from require to prefer, and CopyIn() and CopyInToSchema() have been deprecated.

• EGo 1.9 – A Go compiler for building confidential Go apps running in enclaves on Intel SGX-enabled hardware.

• ncruces/go-sqlite3 0.32 – database/sql-compatible SQLite 3.51.3 driver without requiring Cgo.

• argon2 1.5 – Pure Go Argon2 implementation for secure password hashing.

• GoSQLX 1.13 – SQL parser and AST generator and toolkit. (Playground.)

• wasm2go 0.2 – Experimental WebAssembly to Go translator.

• go-tui 0.8 – Declarative, reactive terminal UI framework.

• html2text 1.4 – HTML to plain text conversion library.

• MGPUSIM 4.2 – AMD GCN3-based GPU simulator.

• gosaml2 0.11 – Pure Go SAML 2.0 implementation.

• gotreesitter 0.10 – Pure Go tree-sitter runtime.

📢  Elsewhere in the ecosystem

• Back in 1989, Rob Pike, famous not only for his work on Go but also for co-creating UTF-8, wrote Rob Pike's 5 Rules of Programming which has gone viral this week. Digging deeper, though, Rob also has a variety of Go development proverbs which he shared in ▶️ this classic talk.

• If upgrading to macOS 26 (Tahoe) has broken your custom local TLDs (e.g. .internal or .test), this Gist might come in useful.

• ;? Some analysis of how different programming languages (including Go) handle a lack of mandatory semicolons.

• 🤖 The Node.js community is wrestling with the role that LLM-produced code should play in its implementation, with the former creator of the io.js fork starting a petition to say 'no' to contributions built with AI assistance.

• 🖼️ JPEG Compression is a neat interactive visual explainer walking through the stages of JPEG image compression.