How Cilium Hardens Its Go Supply Chain End to End — Vendoring every Go module is just one of a dozen controls in Cilium’s GitHub Actions and supply chain playbook, from gating PR triggers to signing releases, with an honest list of the gaps they haven’t closed yet.

André Martins and Feroz Salam (Cilium)

📊 The GoLand 2026.2 Early Access Program — The commercial Go IDE focuses on performance, pulling perf work out of separate tools and into the IDE, like built-in profiler visualization and analysis, escape analysis, a struct layout optimizer, and real-time CPU/memory usage monitoring.

Artem Pronichev (JetBrains)

💡 EAP builds are free to use for 30 days over the EAP cycle, so you can daily drive it for free until the beta.

btype: Fast B-Tree-Based Collection Types — From the creator of GJSON comes a new library offering B-tree-based collection types (including maps, sets, tables, queues, and stacks) that’s faster than existing B-tree implementations in Go, Rust, and C++.

Josh Baker

📄 A Deep Dive Into How Your Go Code Becomes a Binary – “This is a really long deep dive.” Gabor Koos

🛠 Code & Tools

🎵 lofimusic.app is mentioned as an example of a site built on go-app.

• graphql-go v1.10.0 – GraphQL library now implementing the official GraphQL September 2025 spec.

• Dasel 3.10 – CLI tool and Go library for working with JSON, YAML, TOML, XML, CSV, HCL, and INI files.

• 🖼️ Native WebP for Go 1.3 – Go-based native WebP encoder with no libwebp dependency.

• urfave/cli 3.9 – Popular package for building command line tools in a declarative fashion.

• Caddy Defender 0.10.1 – Caddy module to block or manipulate requests originating from AIs or cloud services.

• 🔒 Lego 5.0 – Let's Encrypt client and ACME library. There are more details in this blog post.

• Ark 0.8 – Archetype-based Entity Component System (ECS) for Go.

• wgpu v0.28.0 – Pure Go WebGPU Implementation.