Go Turns 17

Go’s 17th-anniversary update presents the project as a stable, compatibility-focused language adapting to changing hardware, security needs, and AI-assisted development. Go 1.26 and 1.27 make generics more practical through generic methods, self-referential constraints, and improved type inference, while small syntax changes simplify pointer and struct construction. A major library milestone is the release of encoding/json/v2 and jsontext, which offer stricter defaults, streaming, customization, and substantially faster unmarshaling; the original JSON package now uses v2 internally, allowing gradual migration. Other improvements include a production goroutine-leak profiler, automatic draining of small unread HTTP response bodies, new standard-library APIs, and faster I/O, compression, and image handling.

The update also emphasizes performance, security, and ecosystem resilience. The Green Tea garbage collector reduces overhead by 10-40% in real workloads, experimental SIMD packages expose vector hardware, and compiler and allocator changes speed up memory-intensive programs. Security work includes default hybrid post-quantum key exchanges, ML-DSA signatures, safer randomness use in cryptographic APIs, heap address randomization, and tools for erasing sensitive data. Go’s vulnerability database, govulncheck, and release infrastructure support broader ecosystem defense; that preparation was tested during an October certificate-key disclosure incident. Across these efforts, the stated aim is to make Go safer and more efficient without sacrificing compatibility or the simplicity that lets people - and increasingly coding agents - build and maintain reliable software.