Go's work on native FIPS 140 support

#562 — July 16, 2025

Go Weekly

🔒 The FIPS 140-3 Go Cryptographic Module — FIPS 140 is a standard for cryptography implementations that’s a requirement in certain subsectors (particularly involving the US government) and while most developers won’t need to worry about it, FIPS 140 support will open doors for some Go devs. This post goes into depth about Go's FIPS 140 support, but if you don’t know what FIPS 140 is, don’t worry about it too much.

Valsorda, McCarney and Shoemaker

Fix Slow Postgres Queries with pganalyze Query Advisor — Register for our webinar July 30 to learn how to detect common Postgres query plan problems, get actionable rewrite recommendations, and track the impact in one comprehensive tool.

pganalyze sponsor

A Deep Dive Into Deeply Recursive Go — Go’s lack of tail-call optimization makes deep recursion prone to fatal stack overflows. Juho discusses real-world recursion scenarios (and the CVEs they led to) and offers ways to make things safer in your code, along with a proposal to add recoverable overflow handling in the runtime.

Juho Forsén (Mattermost)

Learn Go with Tests: An Online Book for Learning TDD with Go — It’s had a few updates over the past year and remains a fantastic resource for walking through both the basics and more intermediate topics like reflection and generics.

Chris James

🇫🇷 There's now also a French translation, if that's more your tasse de thé.

You Don't Need testify/assert — An alternative approach for tight, clean tests, which leads to Anton’s Be minimal test assertions package that follows his own advice.

Anton Zhiyanov

Kubernetes Best Practices 2025: Comprehensive White Paper — Learn how to improve Kubernetes security, reliability and cost control with practical guidance from real-world clusters.

Fairwinds sponsor

📄 Doing Web Things with CGIs is Mostly No Longer a Good Idea – A sensible response to a fun post we featured last week about using Go to create modern-day CGI-style apps. Chris Siebenmann

📄 Building Event-Driven Go Apps with Azure Cosmos DB and Azure Functions Abhishek Gupta (Microsoft)

📄 A Zero-Sized Bug Hunt in golang.org/x/sync Fillmore Labs

📄 New in Go 1.25: WaitGroup.Go() Christoph Berger

🛠 Code & Tools

pproftui: A Terminal-Based Diagnostic Tool for pprof Data — The idea is rather than focusing on profiling data visually, you get a quick view into the actual code causing the activities being monitored. You can then fix problems more quickly and diff the results of future runs. Live profile viewing is also possible.

Oloruntobi1

oapi-codegen 2.5: Generate Go Boilerplate from OpenAPI 3 Specs — A tool and library for converting OpenAI specifications to Go code, both server and client-side. Less boilerplate for you to write! The v2.5 release notes tease some new tweaks and eventual OpenAPI 3.1 support (which you can use some tricks to achieve for now).

Various Contributors

Introducing go-cdc-chunkers: A New Way to Chunk and Deduplicate Everything — Content-Defined Chunking (CDC) is the idea of dividing data into variable-sized chunks based on the content of the data, making it easier to deduplicate. Gilles explains why that’s useful (in quite some depth) and shows off a new Go project giving access to such algorithms.

Gilles Chehade

cpuid 2.3: CPU Feature Identification for Go — Use this to find out how many physical and logical cores there are, the family of CPU, and similar details. Supports x86/x64 and ARM64.

Klaus Post

FastHTTP 1.64 – Performance-oriented alternative to net/http for specific high-volume scenarios.
Revive 1.11 – Fast, configurable, extensible, flexible linter for Go.
FerretDB 2.4 – MongoDB-a-like but atop Postgres (or SQLite).
gocryptfs 2.6 – Encrypted overlay filesystem atop Go-FUSE.
BadgerDB 4.8 – Fast Go-powered key/value database.
Kubo 0.36 – An IPFS implementation in Go