The Go release tracker

Go 1.27 adds generic methods and other small language refinements, ships new encoding/json/v2, post-quantum crypto/mldsa, and experimental SIMD packages, speeds up small allocations, and makes goroutine leak profiling generally available—an incremental, compatibility-preserving upgrade.

Contains fixes to the net/http package.

A minimal release containing only fixes to the net/http package.

Delivers security fixes for the go command, crypto/tls, encoding/asn1, encoding/xml, html/template, net, net/http, and net/url, plus bug fixes.

Ships security fixes to the go command and packages like crypto/tls, html/template, and net/url, plus compiler and runtime bug fixes.

Fixes security issues in crypto/tls and os, plus bug fixes to the compiler, runtime, go command, net, os, and syscall.

Includes security fixes to crypto/tls and os, along with bug fixes to the compiler, go command, and net and os packages.

Patches security issues in crypto/x509, mime, and net/textproto, along with bug fixes to the compiler, runtime, go fix, and crypto/fips140.

Fixes security issues in crypto/x509, mime, and net/textproto, plus bug fixes to the compiler and runtime.

Includes security fixes for the go command, pack tool, html/template, net, net/http, net/http/httputil, net/mail, and syscall, plus bug fixes.

A broad release with security fixes to the go command, pack tool, and networking packages, plus compiler, linker, and runtime bug fixes.

Adds security fixes to the go command, compiler, archive/tar, crypto/tls, crypto/x509, html/template, and os, alongside several bug fixes.

Provides security fixes to the go command, compiler, and packages like crypto/tls, crypto/x509, and html/template, plus runtime bug fixes.

Ships security fixes for crypto/x509, html/template, net/url, and os, plus bug fixes to the go command, go fix, the compiler, os, and reflect.

Delivers security fixes to html/template, net/url, and os, along with bug fixes to the go command, compiler, and os.

Go 1.26 adds two small language extensions (new(expr), self-referential generic constraints), a rewritten go fix with automated "modernizers," a default-on Green Tea GC (10-40% less GC overhead), faster cgo calls, heap-address randomization, and tighter crypto/net defaults — all compatible with existing code.

Includes security fixes to the go command and crypto/tls, plus bug fixes to the compiler and crypto/x509 package.

Fixes security issues in the go command and crypto/tls package, plus bug fixes to crypto/x509.

Adds security fixes to the go command plus archive/zip, crypto/tls, and net/url, along with compiler, runtime, and library bug fixes.

Fixes security issues in the go command, archive/zip, crypto/tls, and net/url, plus bugs in the compiler, runtime, crypto/tls, and os.

Patches two security issues in crypto/x509 and fixes bugs in the mime and os packages.

Fixes two security issues in crypto/x509 plus bug fixes to the runtime.

Fixes the compiler, runtime, and the crypto/subtle, encoding/pem, net/url, and os packages.

Fixes issues in the encoding/pem and net/url packages.

A small release containing only fixes to the crypto/x509 package.

Fixes issues in the crypto/x509 package.

Ships security fixes across nine packages including crypto/tls, crypto/x509, and net/http, plus assorted compiler, runtime, and library bug fixes.

Fixes security issues across archive/tar, crypto/tls, crypto/x509, encoding/asn1, encoding/pem, net/http, net/mail, net/textproto, and net/url.

Delivers security fixes for net/http plus bug fixes for the go command and the net, os, os/exec, and testing/synctest packages.

Delivers non-security fixes to the go command and the net and os/exec packages.

Go 1.25 has no language changes but adds container-aware GOMAXPROCS, an experimental low-overhead garbage collector, DWARF5 debug info by default, and a compiler bugfix that makes some previously-passing but spec-violating nil-check code now panic. It also graduates testing/synctest to stable and adds an experimental encoding/json/v2.

Fixes security issues in database/sql and os/exec, plus bug fixes to the runtime.

Security fixes for database/sql and os/exec packages, plus bug fixes to the runtime.

Fixes a go command security issue and bugs in the compiler, linker, runtime, and the go command itself.

Security fix for the go command, plus bug fixes to the compiler, the linker, and the runtime.

Fixes security issues in crypto/x509, net/http, and os, plus bugs in the linker, go command, hash/maphash, and os.

Security fixes for net/http and os packages, plus bug fixes to the linker.

Fixes an os package security issue and bugs in the runtime, compiler, linker, go command, and crypto/tls and os packages.

Fixes to the runtime and the linker.

Fixes a net/http security issue and bugs in the compiler, runtime, go command, crypto/tls, go/types, net/http, and testing.

Security fix for net/http, plus bug fixes to the runtime and the go command.

Fixes a net/http security issue and bugs in cgo, the compiler, the go command, and the reflect, runtime, and syscall packages.

Security fix for net/http, plus bug fixes to cgo, the compiler, and the reflect, runtime, and syscall packages.

Go 1.24 (Feb 2025) is mostly a toolchain/runtime/library release: full generic type aliases, go.mod tool dependency tracking, faster maps and allocator, a new os.Root sandboxed filesystem API, testing.B.Loop, weak pointers, and new post-quantum/FIPS-oriented crypto packages, all under the usual Go 1 compatibility guarantee.

Security fix for crypto/elliptic, plus bug fixes to the compiler and the go command.

A security fix for crypto/elliptic, plus bug fixes to the compiler and the go command.

Security fixes for crypto/x509 and net/http, plus bug fixes to the compiler, runtime, and net package.

Security fixes for crypto/x509 and net/http, plus bug fixes to the runtime.

Fixes to the compiler, the runtime, the trace command, and the syscall package.

Fixes to the runtime and the syscall package.

Fixes to the linker, the runtime, and the net/http, os, and syscall packages.

Fixes to the linker.

Fixes to the compiler, cgo, the runtime, and the maps, os, os/exec, time, and unique packages.

Fixes to cgo, and the maps and syscall packages.

Security fixes for encoding/gob, go/build/constraint, and go/parser, plus bug fixes to the compiler, go command, runtime, and other packages.

Security fixes for encoding/gob, go/build/constraint, and go/parser, plus bug fixes to the fix command and the runtime.

Go 1.23 adds range-over-func iterators as a language feature, a preview of generic type aliases, an opt-in telemetry system, new unique/iter/structs packages, and changes Timer/Ticker GC and channel behavior (version-gated via go.mod).

Bug fixes to the go command, compiler, linker, trace command, covdata command, and the bytes, go/types, and os/exec packages.

Includes fixes to the go command, the covdata command, and the bytes package.

A security fix for net/http, plus bug fixes to the compiler, cgo, go command, linker, runtime, crypto/tls, go/types, net, net/http, and os/exec.

Fixes a security issue in net/http, plus bug fixes across the compiler, go command, runtime, crypto/x509, net/http, net/netip, and os.

Security fixes for archive/zip and net/netip, plus bug fixes to the compiler, go command, linker, runtime, and os package.

Fixes security issues in archive/zip and net/netip, plus bug fixes to the compiler, go command, runtime, and os package.

Security fixes for the go command and net package, plus bug fixes to the compiler, runtime, and net/http.

Fixes security issues in the go command plus bug fixes to the net/http package.

A security fix for net/http, plus bug fixes to the compiler, go command, linker, encoding/gob, go/types, net/http, and runtime/trace.

Fixes a security issue in net/http plus bug fixes to the linker, go/types, and net/http.

Security fixes for crypto/x509, html/template, net/http, net/http/cookiejar, and net/mail, plus bug fixes across the compiler, go command, runtime, trace, go/types, and net/http.

Fixes security issues in crypto/x509, html/template, net/http, net/http/cookiejar, and net/mail, plus go command and runtime bug fixes.

Go 1.22 changes for-loop semantics so each iteration gets its own variables, adds range-over-integers, and ships math/rand/v2 plus method/wildcard-based net/http routing, alongside PGO devirtualization gains, new vet checks, and a rebuilt execution tracer.

Includes bug fixes to the compiler, the go command, the runtime, and the crypto/x509 package.

Fixes to the crypto/x509 package.

Includes bug fixes to the compiler, runtime, and the crypto/tls, maps, and runtime/pprof packages.

Fixes to the runtime and the crypto/tls package.

Fixes security issues in the go command, net/http, and path/filepath, plus bug fixes across several packages.

Security fixes for the go command and the net/http and path/filepath packages, plus bug fixes to the compiler and go command.

Fixes a security issue in path/filepath plus bug fixes to the linker, runtime, compiler, go/types, net/http, and runtime/cgo.

Security fixes for the path/filepath package, plus bug fixes to the linker and the net/http package.

Delivers a single security fix to the net/http package.

A security fix for the net/http package.

Fixes one security issue in cmd/go along with bug fixes to the compiler, go command, linker, runtime, and runtime/metrics.

One security fix for the cmd/go package, plus bug fixes to the go command and the linker.

Fixes four security issues in cmd/go, crypto/tls, and html/template, plus bug fixes across the compiler, linker, runtime, and several packages.

Two security fixes for html/template, plus bug fixes to the compiler, go command, runtime, and crypto/tls, go/types, net/http, and path/filepath packages.

Fixes to the go command and the crypto/tls and net/http packages, with no security fixes mentioned.

Go 1.21 adds min/max/clear builtins, much stronger generics type inference, and a formally defined package init order, while overhauling toolchain handling so go.mod's go line is a strict minimum and GODEBUG preserves old behavior on upgrade. It also ships log/slog, slices, maps, and cmp packages, production-ready PGO, and notable GC latency improvements.

A security fix for crypto/tls, along with bug fixes to the assembler and the compiler.

A security fix for the crypto/tls package plus bug fixes to the assembler and the compiler.

A security fix for net/http, plus bug fixes across the compiler, cgo, cover tool, go command, runtime, and several other packages.

A security fix for net/http plus bug fixes to cgo, the cover tool, the go command, the runtime, and go/printer.

Four security fixes for cmd/go and the runtime, plus bug fixes to the compiler, go command, runtime, and crypto/rsa, net, and os packages.

Four security fixes to the cmd/go and runtime packages plus bug fixes to the compiler, go command, and runtime.

Three security fixes for html/template, plus bug fixes to the compiler, runtime, and the crypto/subtle, crypto/tls, net/http, and syscall packages.

Three security fixes to html/template plus bug fixes to the compiler, runtime, crypto/tls, and syscall packages.

Security fixes for go/parser, html/template, mime/multipart, net/http, and net/textproto, plus bug fixes to the compiler, linker, runtime, and time package.

Security fixes for go/parser, html/template, mime/multipart, net/http, and net/textproto, plus bug fixes to the linker, runtime, and time.

A security fix for crypto/elliptic, along with bug fixes to the compiler, covdata, linker, runtime, and several crypto/os/syscall packages.

A security fix for the crypto/elliptic package plus bug fixes to the linker, runtime, crypto/x509, and syscall packages.

Security fixes for crypto/tls, mime/multipart, net/http, and path/filepath, plus bug fixes to the compiler, go command, linker, runtime, and time package.

Security fixes for crypto/tls, mime/multipart, net/http, and path/filepath, plus bug fixes to the go command, linker, runtime, crypto/x509, net/http, and time.

Go 1.20 has no major new language syntax but brings a preview of profile-guided optimization, coverage instrumentation for full binaries, cgo-disabled-by-default builds, multi-error wrapping (errors.Join), and several crypto packages moving to slower but constant-time implementations.

Bug fixes to the compiler, linker, and the crypto/x509, net/http, sync/atomic, and syscall packages, with no security fixes noted.

Bug fixes only, covering cgo, the compiler, the linker, and the crypto/x509, net/http, and syscall packages, with no security fixes noted.

Security fixes for net/http and os, plus bug fixes to the compiler, runtime, crypto/x509, os/exec, and sync/atomic.

Security fixes for net/http and os packages, plus bug fixes to cgo, the compiler, runtime, and crypto/x509 and os/exec packages.

Security fixes for os/exec and syscall packages, along with bug fixes to the compiler and runtime.

Security fixes for os/exec and syscall packages, along with a bug fix to the runtime.

Security fixes for archive/tar, net/http/httputil, and regexp, plus bug fixes to the compiler, linker, runtime, and go/types.

Security fixes for archive/tar, net/http/httputil, and regexp, plus bug fixes to the compiler, linker, and go/types package.

Security fixes for net/http and net/url plus bug fixes to the compiler, go command, pprof, linker, runtime, crypto/tls, and crypto/x509.

A security fix for net/http, plus bug fixes to the compiler, go command, pprof command, runtime, and crypto/tls, encoding/xml, and net packages.

Go 1.19 is mostly a toolchain/runtime/library release: a new soft memory limit (GOMEMLIMIT), new atomic types, better doc-comment formatting, LoongArch and faster RISC-V support, plus security-hardening changes to PATH lookups and several crypto packages. Only one trivial language change; full backward compatibility maintained.

Security fixes for encoding/gob and math/big, along with bug fixes to the compiler, go command, runtime, and testing package.

Fixes security issues in encoding/gob and math/big, plus bugs in the compiler and runtime.

Security fixes across compress/gzip, encoding/gob, encoding/xml, go/parser, io/fs, net/http, and path/filepath, plus several tooling bug fixes.

Fixes security issues in compress/gzip, encoding/gob, encoding/xml, go/parser, io/fs, net/http, and path/filepath, plus compiler, go command, runtime, and runtime/metrics bugs.

Security fixes for crypto/rand, crypto/tls, os/exec, and path/filepath, plus bug fixes to the compiler and two other packages.

Fixes security issues in crypto/rand, crypto/tls, os/exec, and path/filepath, plus a bug fix in crypto/tls.

Security fix for the syscall package, along with bug fixes to the compiler, runtime, go command, and several standard library packages.

Fixes a security issue in the syscall package, plus bugs in the compiler, runtime, crypto/x509, and net/http/httptest.

Security fixes for crypto/elliptic, crypto/x509, and encoding/pem, plus bug fixes to the compiler, linker, runtime, go command, vet, and other packages.

Fixes security issues in crypto/elliptic and encoding/pem, plus bugs in the linker and runtime.

Go 1.18 introduces generics (type parameters, constraints, any/comparable) as a major but proceed-with-caution language change, adds native fuzzing to go test, and ships numerous toolchain, runtime, and library updates including net/netip, go.work workspaces, and stricter compiler checks.

Fixes a security issue in regexp/syntax and bugs in the compiler, runtime, go command, crypto/x509, and net packages.

Adds a security fix to regexp/syntax plus bug fixes to the compiler, runtime, go command, and net package.

Fixes security issues in the go command, crypto/elliptic, and math/big, plus bugs in the compiler, linker, runtime, go command, debug/macho, debug/pe, and net/http/httptest.

Adds security fixes to the go command, crypto/elliptic, and math/big, plus bug fixes to the compiler, linker, runtime, go command, debug/macho, debug/pe, net/http/httptest, and testing.

Fixes bugs in the compiler, linker, runtime, and the crypto/x509, net/http, and reflect packages.

Fixes issues in the compiler, linker, runtime, and the net/http package.

Fixes security issues in the net/http and syscall packages.

Delivers security fixes to the net/http and syscall packages.

Fixes bugs in the compiler, linker, runtime, and the go/types, net/http, and time packages.

Fixes issues in the compiler, runtime, and the net/http, net/http/httptest, and time packages.

Fixes security issues in archive/zip and debug/macho, plus bugs in the compiler, linker, runtime, go command, misc/wasm, net/http, and syscall.

Adds security fixes to archive/zip and debug/macho, plus bug fixes to the compiler, linker, runtime, misc/wasm, and net/http.

Fixes security issues in the linker and misc/wasm, plus bugs in the compiler, runtime, go command, text/template, and time.

Adds security fixes to the linker and misc/wasm directory, plus bug fixes to runtime and text/template.

Fixes a security issue in archive/zip and bugs in the compiler, linker, go command, crypto/rand, embed, go/types, html/template, and net/http.

Adds a security fix to archive/zip plus bug fixes to archive/zip, go/internal/gccgoimporter, html/template, net/http, and runtime/pprof.

Go 1.17 adds small language features (slice-to-array-pointer conversion, unsafe.Add/Slice), a register-based calling convention that speeds up compiled code (~5%) and shrinks binaries on amd64, and module graph pruning for go.mod. It also tightens defaults in net/url, net/http, and crypto/tls — some of which are behavior-changing and worth checking before upgrading.

Adds a security fix to net/http/httputil plus bug fixes to the compiler, linker, runtime, go command, and net/http.

Includes a security fix to net/http/httputil plus bug fixes to the compiler, runtime, go command, and net/http package.

Adds a security fix to crypto/tls plus bug fixes to the compiler and the net and net/http packages.

Includes a security fix to the crypto/tls package plus bug fixes to the linker and the net package.

Adds security fixes to archive/zip, math/big, net, and net/http/httputil, plus bug fixes to the linker, go command, and net/http.

Delivers security fixes to archive/zip, math/big, net, and net/http/httputil, plus bug fixes to the linker, go command, math/big, and net/http.

Adds a security fix to net/http plus bug fixes to the compiler, runtime, archive/zip, syscall, and time.

Includes a security fix to net/http plus bug fixes to the compiler, runtime, archive/zip, syscall, and time packages.

Fixes issues in the compiler, linker, runtime, the go command, and the testing and time packages.

Fixes cgo, the compiler, linker, runtime, the go command, and the database/sql and net/http packages.

Fixes issues in cgo, the compiler, linker, the go command, and the syscall and time packages.

Fixes the compiler, the go command, and the net/http, os, syscall, and time packages.

Delivers security fixes to the archive/zip and encoding/xml packages.

Delivers a security fix to the encoding/xml package.

Go 1.16 adds native file embedding (//go:embed, embed package) and a new io/fs filesystem abstraction, makes module mode the default, adds Apple Silicon (darwin/arm64) support, deprecates io/ioutil, and stops go build/test from silently editing go.mod/go.sum.

Fixes the compiler, linker, runtime, the go command, and the net/http package.

Delivers fixes to the compiler, runtime, the go command, and the net/http package.

Delivers security fixes to the go command and the crypto/elliptic package.

Provides security fixes to the go command and the crypto/elliptic package.

Fixes the compiler, linker, runtime, the go command, and the io package.

Delivers fixes to the compiler, runtime, and the go command.

Delivers security fixes to the go command and the math/big package.

Provides security fixes to the go command and the math/big package.

Fixes cgo, the compiler, linker, runtime, and the compress/flate, net/http, reflect, and time packages.

Delivers fixes to the runtime, and the net/http and time packages.

Fixes cgo, the compiler, runtime, the go command, and the bytes, plugin, and testing packages.

Delivers fixes to the compiler, runtime, and the plugin and testing packages.

Fixes the compiler, runtime, documentation, the go command, and the net/mail, os, sync, and testing packages.

Delivers fixes to the compiler, linker, runtime, documentation, and the net/http and testing packages.

Delivers security fixes to the net/http/cgi and net/http/fcgi packages.

Provides security fixes to the net/http/cgi and net/http/fcgi packages.

Go 1.15 has no language changes; it's mainly a toolchain and runtime release with a much faster, leaner linker, better small-object allocator performance, and tighter security defaults (X.509 CommonName, net/http parsing). Full Go 1 compatibility is maintained, so upgrading should be low-risk for most programs.

Provides a security fix to the encoding/binary package.

Security fixes for the encoding/binary package.

Delivers fixes to the go command, compiler, linker, vet, and database/sql, encoding/json, net/http, reflect, and testing packages.

Fixes to the compiler, vet, and the database/sql, net/http, and reflect packages.

Provides security fixes to the crypto/x509 and net/http packages.

Security fixes for the crypto/x509 and net/http packages.

Delivers fixes to the go doc command, the runtime, and the encoding/json and os packages.

Fixes to the runtime, and the go/types and math/big packages.

Delivers fixes to cgo, the compiler, the runtime, and the go/doc and math/big packages.

Fixes to the compiler.

Delivers fixes to cgo, the go command, the runtime, and the os/exec and testing packages.

Fixes to the go command, the runtime, and the os/exec and time packages.

Delivers fixes to the go command, tools, and the runtime.

Fixes to the go command, tools, the runtime, the toolchain, and the crypto/cypher package.

Go 1.14 declares modules production-ready with new vendoring rules and flags, adds asynchronous goroutine preemption to fix scheduler/GC stalls in tight loops, and cuts defer overhead to near zero, alongside a language change allowing overlapping embedded interface methods.

Fixes to the runtime, and the crypto/x509 and net/http packages.

Includes a fix to the runtime.

Two security fixes for the crypto/x509 package.

Includes two security fixes to the crypto/x509 package.

Fixes to the runtime and the net/http package.

Includes fixes to the runtime and the net/http package.

Fixes to the go command, runtime, linker, and the net/http package.

Includes a fix to the runtime.

Fixes to net/http and syscall, plus a macOS 10.15 Catalina Gatekeeper rejection issue for installers/binaries.

Fixes an issue where non-notarized installers and binaries were rejected by Gatekeeper on macOS 10.15 Catalina; only affected macOS users need to update.

Fixes to the go command, toolchain, runtime, and the crypto/ecdsa, net, net/http, and syscall packages.

Security fixes for the compiler and the crypto/dsa package.

Includes fixes to the go command, runtime, and the net and syscall packages.

Includes a security fix to the crypto/dsa package.

Security fixes for the net/http and net/textproto packages.

Includes security fixes to the net/http and net/textproto packages.

Go 1.13 adds new number literal syntax and signed shift counts, introduces error wrapping (%w, errors.Is/As/Unwrap), turns on TLS 1.3 by default, and overhauls module proxy/checksum defaults (GOPROXY, GOSUMDB, GOPRIVATE) alongside a 30% defer speedup.

Includes fixes to the linker, and the math/big and os packages.

Includes security fixes to the net/http and net/url packages.

Security fixes to the net/http and net/url packages.

Includes fixes to cgo, the compiler, and the linker.

Fixes to the compiler and the linker.

Includes fixes to the compiler, linker, go command, and the crypto/x509, net/http, and os packages.

A fix to the crypto/x509 package.

Includes fixes to the compiler, linker, go command, runtime, and the os package.

Security fixes to the runtime plus bug fixes to the linker.

Fixes a cgo linking failure caused by using prebuilt binaries on older GNU/Linux versions; only affected Linux users need to update.

Fixes cgo linking failures when using prebuilt binaries on older GNU/Linux versions.

Was accidentally released without its intended fix, making it identical to go1.12.2 except for the version number.

Accidentally released without its intended fix; identical to go1.11.7 except for the version number.

Includes security fixes to the runtime plus bug fixes to the compiler, go command, and doc, net, net/http/httputil, and os packages.

Fixes to the runtime and the net package.

Fixes cgo, the compiler, the go command, and the fmt, net/smtp, os, path/filepath, sync, and text/template packages.

Fixes to cgo, compiler, linker, runtime, go command, and the crypto/x509, encoding/json, net, and net/url packages.

Go 1.12 makes no language changes but improves the toolchain: opt-in TLS 1.3, a now-mandatory build cache, better module support outside module directories, faster GC sweeping and more aggressive memory release, and a rewritten go vet. It's also the last release supporting FreeBSD 10.x, macOS 10.10, and binary-only packages.

A security fix to the crypto/elliptic package.

Delivered a security fix to the crypto/elliptic package.

Fixes to cgo, compiler, linker, runtime, docs, go command, go/types, and net/http, plus a fix for a Go 1.11.3 "go get" regression with "..." patterns.

Fixed a bug introduced in Go 1.10.6 that broke go get for import path patterns containing "...".

Three security fixes affecting "go get" and the crypto/x509 package.

Delivered three security fixes to "go get" and crypto/x509, matching Go 1.11.3, released simultaneously.

Fixes to the compiler, linker, documentation, go command, and the database/sql and go/types packages.

Fixed the go command, linker, runtime, and the database/sql package.

Fixes to the compiler, docs, go command, runtime, crypto/x509, encoding/json, go/types, net, net/http, and reflect.

Go 1.11 makes no language changes but adds experimental module support (an alternative to GOPATH with versioning) and an experimental WebAssembly port. It also removes the runtime's heap size limit, improves debug info and compiler optimizations, and drops support for older macOS/Windows/OpenBSD versions.

Fixed the go command, linker, and the bytes, mime/multipart, net/http, and strings packages.

Fixed the go command and crypto/tls, crypto/x509, and strings packages, plus added minimal support for the vgo transition.

Go 1.9.7 fixes the go command and the crypto/x509 and strings packages, and adds minimal go command support for the vgo transition.

Fixed bugs in the compiler, linker, and go command.

Go 1.9.6 includes fixes to the compiler and go command.

Fixed a security issue in the go command and bug fixes in the compiler, runtime, and several standard library packages.

Go 1.9.5 provides security fixes to the go command along with bug fixes to the compiler, go command, and net/http/pprof package.

Go 1.10 focuses on toolchain and library improvements: build/test caching speed up workflows, tests now auto-run vet, and cgo gains string passing and a security-hardening flag whitelist that may break some builds. No language changes; stdlib tweaks are minor but a few (bytes, net/url) can alter existing program behavior.

Go 1.9.4 includes a security fix to the "go get" command.

Delivered a security fix to "go get", matching Go 1.9.4 and released simultaneously with it.

Applied the same math/big fix as Go 1.9.3 and was released at the same time.

Go 1.9.3 delivers security fixes to net/url plus bug fixes to the compiler, runtime, and database/sql, math/big, and net/http packages.

Go 1.9.2 fixes the compiler, linker, runtime, docs, go command, and crypto/x509, database/sql, log, and net/smtp packages, plus a Go 1.9.1 regression breaking go get of non-Git repos.

Fixed the compiler, linker, runtime, docs, go command, crypto/x509, net/smtp, and a Go 1.8.4 regression breaking go get for non-Git repos.

Go 1.9.1 includes two security fixes.

Included two security fixes, matching Go 1.9.1 and released simultaneously with it.

Go 1.9 adds type aliases and defines float op fusion rules to the language, plus transparent monotonic time tracking, a new sync.Map, math/bits package, parallel per-package compilation, and better test-helper support—while staying source-compatible per the Go 1 promise.

Fixed the compiler, runtime, documentation, and the database/sql package.

Delivered a security fix to the crypto/elliptic package.

Go 1.7.6 (2017-05-23) shipped the same security fix as Go 1.8.2, released simultaneously.

Fixed the compiler, linker, runtime, docs, go command, and several packages including crypto/tls and net/http.

Go 1.8 ships a new SSA compiler back end for all architectures (toolchain ~15% faster), dramatically shorter GC pauses, and notable stdlib additions like HTTP/2 server push, graceful HTTP shutdown, wider context.Context support, and sort.Slice. Two small, low-impact language spec changes are included; upgrade is low-risk and worthwhile mainly for performance.

Go 1.7.5 (2017-01-26) fixed the compiler, runtime, and the crypto/x509 and time packages.

Go 1.7.4 (2016-12-01) delivered two security fixes.

Released 2016-12-01, go1.6.4 includes two security fixes, matching the fixes released simultaneously in Go 1.7.4.

Go 1.7.3 (2016-10-19) fixed the compiler, runtime, and packages including crypto/tls and net/http.

Go 1.7.2 was tagged but never fully released after a last-minute bug report, so use 1.7.3 instead.

Go 1.7.1 (2016-09-07) fixed the compiler, runtime, docs, and several packages including net/http and reflect.

Go 1.7 brings a new SSA-based amd64 compiler backend that cuts CPU time 5-35% and shrinks binaries up to 20-30%, promotes the context package into the standard library, finalizes vendoring, and adds subtests/sub-benchmarks to testing—mostly toolchain and library work with one trivial language spec clarification.

Released 2016-07-17, go1.6.3 patches security issues in net/http/cgi and in net/http when used in a CGI environment.

Released 2016-04-20, go1.6.2 fixes the compiler, runtime, tools, docs, and the mime/multipart, net/http, and sort packages.

Released 2016-04-12, go1.6.1 delivers two security fixes.

Go 1.5.4 included two security fixes, matching Go 1.6.1 and released at the same time.

Go 1.6 makes no language changes but adds automatic HTTP/2 support in net/http, enforced runtime rules for sharing Go pointers with C via cgo, default-on vendoring, and runtime detection of concurrent map misuse, plus numerous library fixes and performance gains.

Go 1.5.3 delivered a security fix to math/big that affected the crypto/tls package.

Go 1.5.2 fixed bugs in the compiler, linker, and the mime/multipart, net, and runtime packages.

Fixed security issues in net/http and bug fixes in the runtime package.

Go 1.5.1 fixed bugs in the compiler, assembler, and the fmt, net/textproto, net/http, and runtime packages.

Go 1.5 is a major implementation overhaul: the compiler and runtime are now written in Go instead of C, GC pauses are drastically shorter via a new concurrent collector, and GOMAXPROCS defaults to all CPU cores instead of 1. Language compatibility is preserved, but scheduling-order and multicore-default changes can affect existing programs, and builds are about 2x slower.

Fixed compiler security issues plus bugs in the go command, compiler, linker, runtime, syscall, reflect, and math/big packages.

Fixed bugs in the linker and in the log, syscall, and runtime packages.

Go 1.4 is mostly an internals release: the runtime was rewritten from C to Go, stacks became contiguous, and write barriers were added ahead of Go 1.5's concurrent GC, shrinking heaps 10-30%. It also has two small breaking changes (disallowed **T method calls, stricter file-name build tags) plus go generate, internal packages, and canonical import paths.

Added further bug fixes to cgo, the runtime package, and the nacl port.

Delivered security fixes for crypto/tls plus bug fixes to cgo.

Fixed bugs in the compiler and the runtime, net, and crypto/rsa packages.

Go 1.3 adds no language changes but delivers major implementation work: precise stack garbage collection, contiguous goroutine stacks, a refactored compiler/linker for faster builds, broad performance gains, new experimental OS/arch support, and a couple of behavior-breaking fixes (crypto/tls verification, cgo struct pointers, map iteration order).

go1.2.2 fixed a security issue affecting the tour binary bundled in Go's binary distributions.

go1.2.1 delivered bug fixes to the runtime, net, and database/sql packages.

Go 1.2 is a compatible, moderate release: it adds three-index slicing, tightens the spec around nil pointer dereferences (may expose already-broken code), improves the scheduler's preemption, and ships go test coverage tooling plus several library and performance improvements.

Go 1.1.2 fixes issues in the gc compiler, cgo, and the bufio, runtime, syscall, and time packages.

Go 1.1.1 delivers a security fix to the compiler plus several bug fixes to the compiler and runtime.

Go 1.1 stays fully Go 1-compatible while adding method values, a relaxed missing-return rule, 64-bit ints on 64-bit platforms, a built-in race detector, and broad speedups (often 30-40%) across the compiler, runtime, and GC.

Included only minor code and documentation fixes.

Fixed two bugs in maps using struct or array keys (issues 3695 and 3573), along with many minor code and documentation fixes.

Fixed an escape analysis bug that could cause memory corruption, plus several minor code and documentation fixes.

Go 1 locks in a long-term compatibility promise but breaks pre-1.0 code with substantial language and library cleanups (new error type, redesigned time package, rune type, delete(), reorganized packages); go fix automates most of the migration, and a new go command and packaged binaries debut.