Agents Need Authorization, Not Just Authentication — Most agents inherit a user's full access token, turning a helpful assistant into a confused deputy that can leak production secrets. Learn why this happens and how WorkOS FGA scopes the blast radius with resource-level permissions.

WorkOS sponsor

IN BRIEF:

• A uuid package is coming to Go as an alternative to external dependencies like gofrs/uuid and google/uuid.

• ncruces/go-sqlite3 is dropping its wazero dependency. How? By using wasm2go.

• There was a discussion on /r/golang about the 'so slow' performance of regexes in Go. However, Go’s regex engine offers predictable linear-time matching at the cost of peak performance.

• Awesome GoLand is an attempt to bring together tips, tricks, and resources for those using JetBrains' GoLand IDE.

• "I propose to deprecate the x/net/http2 Transport and Server types."

Comparing 15 String Concatenation Methods — A benchmark comparing the performance and memory usage of a variety of string concatenation methods. I don’t want to spoil it too much but strings.Builder and strings.Join() are solid choices here.

Winter Jung

📄 Shortest Round-Trip: Implementing IEEE 754 to Decimal Conversion in Go – A journey of implementing true JCS (RFC 8785) by tackling the complex problem of IEEE 754 to decimal conversion. Lattice Substrate

🤖 How AI Agents Want to Write Go – “And what happens when you actually let them.” Ivan Cernja (Encore)

📄 Go Errors: To Wrap or Not to Wrap Redowan Delowar

🛠 Code & Tools

go-tui: Build Declarative Terminal UIs in Go — A Templ-inspired take on building TUIs with a strongly frontend-flavored React-esque approach. You define views in .gsx templates with HTML-like syntax, rendered in a flexbox-like fashion, and use Tailwind-style classes for styling. GitHub repo.

Joel Holsteen

• Glamour 2.0 – Stylesheet-based Markdown renderer for ANSI-compatible terminals and CLI applications.

• 🎥 VHS 0.11 – Record GIFs of the terminal for integration testing and demoing CLI tools. Now supports scrolling the viewport.

• Testcontainers for Go 0.41 – Simple creation and clean up of container-based dependencies in testing.

• 📉 asciigraph 0.8 – ASCII line graph rendering for the terminal.

• Mockery 3.7 – Automatically generate mocks for interfaces.

• go-mp4 1.5 – Low-level parsing/building for MP4 files.

• Katana 1.5 – Crawling and spidering framework.

• Log 2.0 – Charm's colorful Go logging library.

• pond 2.7 – Worker pools for goroutines.

📢  Elsewhere in the ecosystem

• Tony Hoare, the esteemed computer scientist, died last week. He invented communicating sequential processes (CSP) which heavily inspired Go's concurrency model.

• Difftastic is a tool to diff code files, not just on a line-by-line basis like diff, but based on syntax. It supports most popular languages including Go.

• Amazon S3 has introduced account regional namespaces for S3 buckets, a feature that will help prevent so-called 'bucketsquatting'.

• GitHub addresses its recent availability issues…

• Homebrew 5.1.0 has been released.