Re: [go-nuts] Go if else syntax .. suggested replacement

2019-04-24 Thread Chris Broadfoot
On Wed, Apr 24, 2019 at 4:22 AM Robert Engels  wrote:

> Though to the ops point, not sure why Go doesn’t have the ternary operator
> - which is pretty ubiquitous.
>

https://golang.org/doc/faq#Does_Go_have_a_ternary_form


>
> On Apr 23, 2019, at 9:56 PM, Robert Engels  wrote:
>
> Why? You have saved 5 characters for no practical gain. I think you would
> enjoy Ada.
>
> On Apr 23, 2019, at 8:05 PM, lgod...@gmail.com wrote:
>
> It sure would be nice if Go syntax allowed programmers to replace
>
> if ( test) {
> ...do sonething
> } else {
> ..do something else
> }
>
> with
>
> ? (test) {
> //...do something
> }
> {
> //..do something else
> }
>
> The ? operator can be anything the Go language team considers appropriate
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Why does this program carry test flags once compiled?

2017-07-24 Thread Chris Broadfoot
One way around the flag problem is to accept an interface, instead of using
testing.T.

Watch Mitchell Hashimoto's talk from GopherCon from about 39m30s:
https://youtu.be/8hQG7QlcLBk?t=2368

http://github.com/mitchellh/go-testing-interface

On Mon, Jul 24, 2017 at 1:44 AM, roger peppe  wrote:

>
>
> On 24 July 2017 at 09:12, Howard Guo  wrote:
>
>> Thanks Nigel! I should definitely consider improving the test case.
>>
>> Go compiler appears to automatically places test flags into executable
>> whenever "testing" package is included - no matter the function using
>> "testing" package is dead code or otherwise. So here's a bug report for go:
>> https://github.com/golang/go/issues/21141
>>
>
> Although this could be considered a bug, it's not one that can be fixed,
> because people rely on this behaviour of the testing package.
>
> Consider it a warning not to include testing dependencies in production
> code.
>
>
>>
>> Kind regards,
>> Howard
>>
>> On Sunday, 23 July 2017 06:54:28 UTC+2, Nigel Tao wrote:
>>>
>>> On Sat, Jul 22, 2017 at 7:08 PM, Howard Guo  wrote:
>>> > https://github.com/HouzuoGuo/laitos
>>>
>>> It's tangential to your question, but out of curiousity, I skimmed the
>>> source code. In things like func TestUDPServer in
>>> https://github.com/HouzuoGuo/laitos/blob/master/frontend/plain/udp.go,
>>> you say:
>>>
>>> var stoppedNormally bool
>>> go func() {
>>>   etc
>>>   stoppedNormally = true
>>> }()
>>> etc
>>> server.Stop()
>>> time.Sleep(1 * time.Second)
>>> if !stoppedNormally { etc }
>>>
>>> This is an example of incorrect synchronization as per
>>> https://golang.org/ref/mem#tmp_10
>>>
>>> There may be other such races in your code. I didn't do an exhaustive
>>> review. It may be worthwhile to run your test suite under the race
>>> detector.
>>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "golang-nuts" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to golang-nuts+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.9 Release Candidate 1 is released

2017-07-25 Thread Chris Broadfoot
Hello gophers,

We have just released go1.9rc1, a release candidate of Go 1.9.
It is cut from release-branch.go1.9 at the revision tagged go1.9rc1.

Thank you to everyone who has helped to test Go 1.9 so far.
We still need more people to test, especially on production workloads.
Your help is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.9rc1
is by using this tool:
https://godoc.org/golang.org/x/build/version/go1.9rc1

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.9rc1

To find out what has changed in Go 1.9, read the draft release notes:
https://tip.golang.org/doc/go1.9

Documentation for Go 1.9 is available at:
https://tip.golang.org/

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.9 Release Candidate 2 is released

2017-08-07 Thread Chris Broadfoot
Hello gophers,

We have just released go1.9rc2, a release candidate of Go 1.9.
It is cut from release-branch.go1.9 at the revision tagged go1.9rc2.

Thank you to everyone who has helped to test Go 1.9 so far.
We still need more people to test, especially on production workloads.
Your help is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.9rc2
is by using this tool:
https://godoc.org/golang.org/x/build/version/go1.9rc2

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.9rc2

To find out what has changed in Go 1.9, read the draft release notes:
https://tip.golang.org/doc/go1.9

Documentation for Go 1.9 is available at:
https://tip.golang.org/

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.9 is released

2017-08-24 Thread Chris Broadfoot
Hello gophers,

We just released Go 1.9.

You can read the announcement blog post here:
  https://blog.golang.org/go1.9

You can download binary and source distributions from our download page:
  https://golang.org/dl/

To compile from source using a Git checkout, update to the release with
"git checkout go1.9" and build as usual.

To find out what has changed, read the release notes:
  https://golang.org/doc/go1.9

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] [security] Go 1.8.4 and Go 1.9.1 are released

2017-10-04 Thread Chris Broadfoot
Hi gophers,

Two security-related issues were recently reported.
To address this issue, we have just released Go 1.8.4 and Go 1.9.1.

We recommend that all users update to one of these releases (if you're not
sure which, choose Go 1.9.1).

The issues addressed by these releases are:

By nesting a git checkout inside another version control repository, it was
possible for an attacker to trick the “go get” command into executing
arbitrary code. The go command now refuses to use version control checkouts
found inside other version control systems, with an exception for git
submodules (git inside git).
The issue is tracked as https://golang.org/issue/22125 (Go 1.8.4) and
https://golang.org/issue/22131 (Go 1.9.1). Fixes are linked from the issues.
Thanks to Simon Rawet for the report.

In the smtp package, PlainAuth is documented as sending credentials only
over authenticated, encrypted TLS connections, but it was changed in Go 1.1
to also send credentials on non-TLS connections when the remote server
advertises that PLAIN authentication is supported. The change was meant to
allow use of PLAIN authentication on localhost, but it has the effect of
allowing a man-in-the-middle attacker to harvest credentials. PlainAuth now
requires either TLS or a localhost connection before sending credentials,
regardless of what the remote server claims.
This issue is tracked as https://golang.org/issue/22134 (Go 1.8.4) and
https://golang.org/issue/22133 (Go 1.9.1). Fixes are linked from the issues.
Thanks to Stevie Johnstone for the report.

Downloads are available at https://golang.org/dl for all supported
platforms.

Cheers,
Chris (on behalf of the Go team)

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Subject: Go 1.9.2 and Go 1.8.5 are released

2017-10-25 Thread Chris Broadfoot
Hi gophers,

We have just released Go versions 1.9.2 and 1.8.5, minor point releases.

These releases include fixes to the compiler, linker, runtime,
documentation, go command, and the crypto/x509, database/sql, log, and
net/smtp packages. They include a fix to a bug introduced in Go 1.9.1 and
Go 1.8.4 that broke "go get" of non-Git repositories under certain
conditions.

View the release notes for more information:
https://golang.org/doc/devel/release.html#go1.9.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with "git
checkout go1.9.2" and build as usual.

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Re: Appengine and main package

2017-11-01 Thread Chris Broadfoot
You can use a main package.

package main

import (
   "net/http"
   "google.golang.org/appengine"
)

func main() {
   http.HandleFunc(...)
   appengine.Main()
}


On Wednesday, November 1, 2017 at 12:04:14 AM UTC-7, Tamás Gulácsi wrote:
>
> Just move your main to a realmain pkg, and have a shim that just calls it.
> I used to create a "func Main() error" and a main which calls this, and 
> log,Fatal on error.

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Pass API key to google cloud vision api

2017-12-20 Thread Chris Broadfoot
Stack Overflow is the best place to ask questions for GCP.

The documentation does describe how to authenticate to this API. If I
recall correctly, API keys are not supported.


On Dec 21, 2017 2:46 AM, "Sathish VJ"  wrote:


I'm trying to make an api call to google vision api using an api key from
golang.  But I'm getting a 400: bad request, invalid_grant error.
What is the right way to make this call?


import (
// ...
"google.golang.org/api/option"
vision "cloud.google.com/go/vision/apiv1"
"golang.org/x/net/context"
)

func getImageLabels(filename string) []string {

ctx := context.Background()

apiKey := "..." // my api key has been generated in the console and should
be fine.
apiKeyOption := option.WithAPIKey(apiKey)

client, err := vision.NewImageAnnotatorClient(ctx, apiKeyOption)

// ...
labels, err := client.DetectLabels(ctx, image, nil, 10)

}

*Failed to detect labels: rpc error: code = Internal desc = transport:
oauth2: cannot fetch token: 400 Bad Request*
*Response: {*
*  "error" : "invalid_grant"*
*}*

p.s. is there a specific group for gcp+golang that I should preferably post
this to?

-- 
You received this message because you are subscribed to the Google Groups
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Go 2018 Survey "Error handling 5%"

2019-07-08 Thread Chris Broadfoot
See the errors proposal here:
https://golang.org/design/29934-error-values

Implementation in tip (available in 1.13 beta)
https://tip.golang.org/pkg/errors/

Implementation in x/xerrors (backwards compatible):
https://godoc.org/golang.org/x/xerrors
xerrors - GoDoc


On Mon, Jul 8, 2019, 9:54 AM Robert Engels  wrote:

>
> I think you are on to something. As I've said, the boilerplate is ugly,
> but manageable. It is the process of using and reporting errors that is the
> problem.
>
> If the error interface were expanded, to included methods like
>
> int Type()
> int SubType()
> []Stack StackTrace()
> error Cause()
> Log(w Writer,string format,...)
>
> with stdlib defining constants for errors, and user developed constants >
> N, the chances of constant collision is minimal.
>
> Alternatively, define like this
>
> string Type()
> string SubType()
>
> with the Type being package.SomeErrorName
> and sub-type being package.SomeErrorName.SubErrorName
>
> to allow easier capture and retry.
>
> To go even further, add a
>
> bool Permanent()
>
> to signify if the same call is made with the same parameters, it is also
> fail - unless some action is taken (network reconfig, etc.) This is a more
> difficult implementation, but could be just a 'hint'.
>
> It's is some amount of work to define the constants, and change existing
> code, but it is just busy work. The Go error handling is worse than C in
> that at least in C, the api doc clearly spells out which error codes can be
> returned, and why. With the Go error interface, and the 'minimal api doc',
> what is returned when is anybody's guess.
>
>
>
> -Original Message-
> From: Chris Passas
> Sent: Jul 8, 2019 8:32 AM
> To: golang-nuts
> Subject: [go-nuts] Go 2018 Survey "Error handling 5%"
>
> We are all aware error handling was tied for 4th most common challenging
> when working with Go in the 2018 survey.
>
> There is not description of what about error handling. I'm sure I missed
> the conversation but how did we get to the point of deciding it was the if
> err!=nil that was the "challenging part"?
>
> Personally the only thing I wish was different was we could have error
> times/categories in addion. Basically just a way to allow us to not need
> the following.
>
> if strings.Contains(err.Err(),"timeout")
>
> Most of the time all you care is there was an error and don't parse the
> message to decide what to do next. There are cases where you might decide
> how to handle it based on the message.
>
> There are messages like "Connection failed to -> 192.168.1.1", this is
> useful but also makes the error something you can't check for without
> substring parsing.
>
> What if we could do something like
>
> if err.Type()=="Bad Connection"
>
> but then you could still return or log the 'err' as normal and get that
> extra info.
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/golang-nuts/fa12d854-c317-4477-98b1-32ca883d2093%40googlegroups.com
> 
> .
> For more options, visit https://groups.google.com/d/optout.
>
>
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/golang-nuts/1215816141.2411.1562594037454%40wamui-charming.atl.sa.earthlink.net
> 
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CAM4ZPhDoCFDxHqcJHJhFzs2DMnfG_JXF8RJ7%2BwdOpDO7a84AUA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Re: go mod dependency hell is real

2019-09-13 Thread Chris Broadfoot
Is this the issue you came across the other day, Jean?

On Fri, Sep 13, 2019, 11:32 PM Antoine Mercadal  wrote:

> Hey,
>
> Then why is it called mvs? I don't understand what package system would
> give me 1.3.49, if I require 1.2.0 and my dependency requires 1.1.0.
>
> I'll read a bit more about it, but you may have decreased my level of go
> module hate by a bit, sir :)
>
> Thanks,
> --
> Antoine Mercadal
>
> On Sep 13, 2019, at 11:05 PM, Jakob Borg  wrote:
>
> On 14 Sep 2019, at 01:52, anto...@aporeto.com wrote:
>
>
> but require 1.2.0 will not work if another dependency requires the same
> package at version 1.1.0 thanks to mvs.
>
> So either I'm wrong and I did not understand mvs, in that case I would
> like to get enlighten, or I got that right and that comforts me in my deep
> hate of mvs.
>
>
> Luckily, you're wrong on this point. MVS means that if you require 1.2.0
> and some dependency requires 1.1.0, you'll both get 1.2.0. (And not, say,
> 1.3.49).
>
> //jb
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/golang-nuts/BF3BD86E-47E7-4D85-A25E-EFA2E42C020E%40aporeto.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CAM4ZPhDkLefv7Hq8eLOX-Z2u0o2dmk%3DcQp6qi%2BV04dUeHNPiOQ%40mail.gmail.com.


[go-nuts] Go 1.7.1 is released

2016-09-07 Thread Chris Broadfoot
Hi gophers,

We have just released Go version 1.7.1, a minor point release.

This release includes fixes to the compiler, runtime, documentation, and the
compress/flate, hash/crc32, io, net, net/http, path/filepath, reflect, and 
syscall packages.
https://golang.org/doc/devel/release.html#go1.7.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with "git 
checkout go1.7.1" and build as usual.

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7.3 is released

2016-10-19 Thread Chris Broadfoot
Hi gophers,

We have just released Go version 1.7.3, a minor point release.

This release includes fixes to the compiler, runtime, and the
the crypto/cipher, crypto/tls, net/http, and strings packages.
https://golang.org/doc/devel/release.html#go1.7.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with "git 
checkout go1.7.3" and build as usual.

Please note that 1.7.2 was tagged, but unreleased - there was a bug 
reported at the last minute so the release announcement was held off. We 
decided not to overwrite the go1.7.2 tag just in case anyone had used it in 
that short window.

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Re: Cloudstore default bucket name - data race?

2016-11-08 Thread Chris Broadfoot
You're right, it's racy.

I'll update the sample.

file.DefaultBucketName will indeed return the same result every time
(unless the default bucket is updated in the App Engine admin console).

On Tue, Nov 8, 2016 at 12:40 PM, Greg Jones  wrote:

> You're not wrong, that code isn't a safe use of a package-level variable.
>
> On Tuesday, 8 November 2016 20:16:28 UTC, krolaw wrote:
>>
>> Hopefully someone can explain where my understanding of dataraces is
>> wrong.
>>
>> As an example, I'd like to use the appengine cloudstorage example:
>> https://cloud.google.com/appengine/docs/go/googlecloudstorag
>> eclient/app-engine-cloud-storage-sample#specifying_the_cloud
>> _storage_bucket
>>
>> When a web request comes in, it checks if the bucketname is empty.  If it
>> is, it sets the bucketname using the result from
>> file.DefaultBucketName(ctx).  It all seems like a good idea, but I'm
>> confused because the bucket name variable is accessed by multiple
>> goroutines.  What if on startup, two requests come in at roughly the same
>> time?  Would we possibly have two goroutines reading and writing to the
>> same variable?  Does the appengine guarantee that the first request
>> finishes before any other starts?  Or is this somehow a minor unimportant
>> datarace, as it is unlikely to occur and even if it does,
>> file.DefaultBucketName returns the same value... so it doesn't matter that
>> it gets called twice and sets the bucket name twice?
>>
>> Thanks and apologies for my confusion.
>>
>> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.8 Beta 1 is released

2016-11-30 Thread Chris Broadfoot
Hello gophers,

We have just released go1.8beta1, a beta version of Go 1.8.
It is cut from the master branch at the revision tagged go1.8beta1.

There are no known problems or regressions.
Please try running production workloads and your unit tests with the new 
version.

It is important that we find bugs *before* issuing a release candidate.
The release candidate is planned for the first week of January.
Your help in testing this beta is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.8beta1

To find out what has changed in Go 1.8, read the draft release notes:
https://beta.golang.org/doc/go1.8

Documentation for Go 1.8 is available at:
https://beta.golang.org/

Our goal is to release the final version of Go 1.8 on February 1st.

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] [security] Go 1.7.4 and Go 1.6.4 are released

2016-12-01 Thread Chris Broadfoot
Two security-related issues were recently reported, and to address these 
issues we have just released Go 1.6.4 and Go 1.7.4.

We recommend that all users update to one of these releases (if you're not 
sure which, choose Go 1.7.4).

The issues addressed by these releases are:

On Darwin, user's trust preferences for root certificates were not honored. 
If the user had a root certificate loaded in their Keychain that was 
explicitly not trusted, a Go program would still verify a connection using 
that root certificate.
This is addressed by https://golang.org/cl/33721, tracked in 
https://golang.org/issue/18141.
Thanks to Xy Ziemba for identifying and reporting this issue.

The net/http package's Request.ParseMultipartForm method starts writing to 
temporary files once the request body size surpasses the given "maxMemory" 
limit. It was possible for an attacker to generate a multipart request 
crafted such that the server ran out of file descriptors.
This is addressed by https://golang.org/cl/30410, tracked in 
https://golang.org/issue/17965.
Thanks to Simon Rawet for the report.

Downloads are available at https://golang.org/dl for all supported 
platforms.

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Re: [security] Go 1.7.4 and Go 1.6.4 are released

2016-12-01 Thread Chris Broadfoot
Quick update: go1.7.4 was tagged with the wrong commit.

It has been updated from:
go1.7.4 0ad8bf4122de7396f771ed12f86934ea3177d6cf
to
go1.7.4 6b36535cf382bce845dd2d272276e7ba350b0c6b

If you built from the go1.7.4 tag at 0ad8b, the version will be incorrectly 
reported as "go1.7.3".

The binaries hosted at https://golang.org/dl are unaffected.

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.8 Beta 2 is released

2016-12-15 Thread Chris Broadfoot
Hello gophers,

We have just released go1.8beta2, a beta version of Go 1.8.
It is cut from the master branch at the revision tagged go1.8beta2.

Thank you to everyone who has helped to test Go 1.8 so far.
We still need more people to test! Your help is invaluable.

It is important that we find bugs *before* issuing a release candidate.
The release candidate is planned for the first week of January.

Report any problems using the issue tracker:
https://golang.org/issue/new

Download the beta with this new tool:
https://godoc.org/golang.org/x/build/version/go1.8beta2

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.8beta2

To find out what has changed in Go 1.8, read the draft release notes:
https://beta.golang.org/doc/go1.8

Documentation for Go 1.8 is available at:
https://beta.golang.org/

Our goal is to release the final version of Go 1.8 on February 1st.

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.8 Release Candidate 1 is released

2017-01-10 Thread Chris Broadfoot
Hello gophers,

We have just released go1.8beta2, a release candidate of Go 1.8.
It is cut from release-branch.go1.8 at the revision tagged go1.8rc1.

Thank you to everyone who has helped to test Go 1.8 so far.
We still need more people to test, especially on production workloads.
Your help is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.8rc1
is by using this tool:
https://godoc.org/golang.org/x/build/version/go1.8rc1

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.8rc1

To find out what has changed in Go 1.8, read the draft release notes:
https://beta.golang.org/doc/go1.8

Documentation for Go 1.8 is available at:
https://beta.golang.org/

Our goal is to release the final version of Go 1.8 on February 1st.

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.8 Release Candidate 2 is released

2017-01-19 Thread Chris Broadfoot
Hello gophers,

We have just released go1.8rc2, a release candidate of Go 1.8.
It is cut from release-branch.go1.8 at the revision tagged go1.8rc2.

Thank you to everyone who has helped to test Go 1.8 so far.
We still need more people to test, especially on production workloads.
Your help is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.8rc2
is by using this tool:
https://godoc.org/golang.org/x/build/version/go1.8rc2

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.8rc2

To find out what has changed in Go 1.8, read the draft release notes:
https://beta.golang.org/doc/go1.8

Documentation for Go 1.8 is available at:
https://beta.golang.org/

Our goal is to release the final version of Go 1.8 on February 1st.

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7 Beta 2 is released

2016-06-16 Thread Chris Broadfoot
Hello gophers,

We have just released go1.7beta2, a beta version of Go 1.7.
It is cut from the master branch at the revision tagged go1.7beta2.

Please help us by testing your Go programs with the release, and report any
problems using the issue tracker:
https://golang.org/issue/new

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.7beta2

To find out what has changed in Go 1.7, read the draft release notes:
https://tip.golang.org/doc/go1.7

Documentation for Go 1.7 is available at:
https://tip.golang.org/

Our goal is to release the final version of Go 1.7 on the 1st of August.

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7 Release Candidate 1 is released

2016-07-07 Thread Chris Broadfoot
Hello gophers,

We have just released go1.7rc1, a release candidate for Go 1.7.
It is cut from release-branch.go1.7 at the revision tagged go1.7rc1.

Please help us by testing your Go programs with the release, and report any 
problems using the issue tracker:
  https://golang.org/issue/new

You can download binary and source distributions from the usual place: 
  https://golang.org/dl/#go1.7rc1

To find out what has changed in Go 1.7, read the draft release notes:
  https://tip.golang.org/doc/go1.7

Documentation for Go 1.7 is available at:
  https://tip.golang.org/

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Re: OS X Installer: Why modify $PATH instead of adding symbolic links to /usr/local/bin?

2016-07-16 Thread Chris Broadfoot
If it isn't the right way of doing things, it might be something we can
change (for 1.8, probably). What's an installer meant to do if there's an
existing binary or symlink at that location?

On Jul 16, 2016 9:41 AM, "Dmitri Shuralyov"  wrote:

Can someone please explain the thinking behind this design decision? Is it
> more common on Linux to have a lot of path additions instead of symbolic
> links to executables? Was this something that was discussed and decided
> upon by the core team or just an arbitrary decision?


> I'd love to get a better understanding of why this choice. I have never
> seen another software take this approach.


This is a great question and I'm curious to find out too from someone
familiar with this design decision.

Not a complaint from me either, I am very happy with either behavior. Just
curious.


On Tuesday, July 12, 2016 at 4:05:36 PM UTC-4, jsej...@gmail.com wrote:
>
> Don't read this as a complaint. I'm trying to get feedback from code
> reviewers about the design decision regarding this behavior of the
> installer.
>
> In my experience, most software for OS X that installs cli components
> installs to /usr/local/ and then creates symbolic links to executables in
> /usr/local/bin/, as not to modify my $PATH. However, the Go installer
> differs in approach by creating a new entry in /etc/paths.d/ for
> path_helper
> 
> to read and then modify my $PATH. Can someone please explain the thinking
> behind this design decision? Is it more common on Linux to have a lot of
> path additions instead of symbolic links to executables? Was this something
> that was discussed and decided upon by the core team or just an arbitrary
> decision?
>
> I'd love to get a better understanding of why this choice. I have never
> seen another software take this approach.
>
>
> 
>
> --
You received this message because you are subscribed to the Google Groups
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] [security] Go 1.6.3 and 1.7rc2 are released

2016-07-18 Thread Chris Broadfoot
A security-related issue was recently reported in Go's net/http/cgi package 
and net/http package when used in a CGI environment. Go 1.6.3 and Go 1.7rc2 
will contain a fix for this issue.

Go versions 1.0-1.6.2 and 1.7rc1 are vulnerable to an input validation flaw 
in the CGI components resulting in the HTTP_PROXY environment variable 
being set by the incoming Proxy header. This environment variable was also 
used to set the outgoing proxy, enabling an attacker to insert a proxy into 
outgoing requests of a CGI program.
This is CVE-2016-5386 and was addressed by this change: 
https://golang.org/cl/25010, tracked in this issue: 
https://golang.org/issue/16405

The Go team would like to thank Dominic Scheirlinck for coordinating 
disclosure of this issue across multiple languages and CGI environments. 
Read more about "httpoxy" here: https://httpoxy.org/

Go 1.6.3 also adds support for macOS Sierra. See 
https://golang.org/issue/16354 for details.

Downloads are available at https://golang.org/dl for all supported 
platforms.

Cheers,
Chris (on behalf of the Go team)

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Re: [security] Go 1.6.3 and 1.7rc2 are released

2016-07-18 Thread Chris Broadfoot
The pre-announcement on golang-nuts also reiterated this plan :)

On Jul 18, 2016 5:04 PM, "Ian Lance Taylor"  wrote:

> On Mon, Jul 18, 2016 at 4:40 PM,   wrote:
> > Ah, sounds good. By chance is there an estimated date on that? :D
>
> Wednesday or Thursday.
>
> Ian
>
>
> > On Monday, July 18, 2016 at 2:49:54 PM UTC-7, Ian Lance Taylor wrote:
> >>
> >> On Mon, Jul 18, 2016 at 1:09 PM,   wrote:
> >> > Or another example https://github.com/golang/go/issues/16333. Its in
> >> > master
> >> > but not the release-branch.go1.7.
> >>
> >> Oh, I see.  The plan, as discussed at the release meeting at Gophercon
> >> but probably never sent to the list, is to do another real release
> >> candidate later this week.  The 1.7rc2 release candidate was just
> >> pushed out for the security fix.  For the next release candidate all
> >> the relevant changes (which is probably all the changes except for one
> >> that was committed accidentally and then reverted) will be migrated
> >> from the master branch to the 1.7 branch.
> >>
> >> Ian
> >>
> >> > On Monday, July 18, 2016 at 12:31:13 PM UTC-7, Ian Lance Taylor wrote:
> >> >>
> >> >> On Mon, Jul 18, 2016 at 12:11 PM,   wrote:
> >> >> > Why are the other changes to be released but not related to this
> >> >> > security
> >> >> > issue not in rc2?
> >> >>
> >> >> To which changes are you referring?
> >> >>
> >> >> Ian
> >> >>
> >> >>
> >> >> > On Monday, July 18, 2016 at 9:59:54 AM UTC-7, Chris Broadfoot
> wrote:
> >> >> >>
> >> >> >> A security-related issue was recently reported in Go's
> net/http/cgi
> >> >> >> package and net/http package when used in a CGI environment. Go
> >> >> >> 1.6.3
> >> >> >> and Go
> >> >> >> 1.7rc2 will contain a fix for this issue.
> >> >> >>
> >> >> >> Go versions 1.0-1.6.2 and 1.7rc1 are vulnerable to an input
> >> >> >> validation
> >> >> >> flaw in the CGI components resulting in the HTTP_PROXY environment
> >> >> >> variable
> >> >> >> being set by the incoming Proxy header. This environment variable
> >> >> >> was
> >> >> >> also
> >> >> >> used to set the outgoing proxy, enabling an attacker to insert a
> >> >> >> proxy
> >> >> >> into
> >> >> >> outgoing requests of a CGI program.
> >> >> >> This is CVE-2016-5386 and was addressed by this change:
> >> >> >> https://golang.org/cl/25010, tracked in this issue:
> >> >> >> https://golang.org/issue/16405
> >> >> >>
> >> >> >> The Go team would like to thank Dominic Scheirlinck for
> coordinating
> >> >> >> disclosure of this issue across multiple languages and CGI
> >> >> >> environments.
> >> >> >> Read more about "httpoxy" here: https://httpoxy.org/
> >> >> >>
> >> >> >> Go 1.6.3 also adds support for macOS Sierra. See
> >> >> >> https://golang.org/issue/16354 for details.
> >> >> >>
> >> >> >> Downloads are available at https://golang.org/dl for all
> supported
> >> >> >> platforms.
> >> >> >>
> >> >> >> Cheers,
> >> >> >> Chris (on behalf of the Go team)
> >> >> >>
> >> >> > --
> >> >> > You received this message because you are subscribed to the Google
> >> >> > Groups
> >> >> > "golang-nuts" group.
> >> >> > To unsubscribe from this group and stop receiving emails from it,
> >> >> > send
> >> >> > an
> >> >> > email to golang-nuts...@googlegroups.com.
> >> >> > For more options, visit https://groups.google.com/d/optout.
> >> >
> >> > --
> >> > You received this message because you are subscribed to the Google
> >> > Groups
> >> > "golang-nuts" group.
> >> > To unsubscribe from this group and stop receiving emails from it, send
> >> > an
> >> > email to golang-nuts...@googlegroups.com.
> >> > For more options, visit https://groups.google.com/d/optout.
> >
> > --
> > You received this message because you are subscribed to the Google Groups
> > "golang-nuts" group.
> > To unsubscribe from this group and stop receiving emails from it, send an
> > email to golang-nuts+unsubscr...@googlegroups.com.
> > For more options, visit https://groups.google.com/d/optout.
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7 Release Candidate 3 is released

2016-07-21 Thread Chris Broadfoot
Hello gophers,

We have just released go1.7rc3, a release candidate for Go 1.7.
It is cut from release-branch.go1.7 at the revision tagged go1.7rc3.

Please help us by testing your Go programs with the release, and report any 
problems using the issue tracker:
  https://golang.org/issue/new

You can download binary and source distributions from the usual place: 
  https://golang.org/dl/#go1.7rc3

To find out what has changed in Go 1.7, read the draft release notes:
  https://tip.golang.org/doc/go1.7

Documentation for Go 1.7 is available at:
  https://tip.golang.org/
  
We plan to release the final version of Go 1.7 in the first week of August, 
as per the release timeline:
  https://github.com/golang/go/wiki/Go-Release-Cycle#timeline

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Re: Go 1.7 Release Candidate 3 is released

2016-07-21 Thread Chris Broadfoot
A couple people requested a changelog between release candidates. I'll try 
to remember to include that for the 1.8 release candidates (we don't plan 
to do a 1.7rc4).

GitHub has a nice view for commits between refs.

Here's what was in 1.7rc2 (very small):
https://github.com/golang/go/compare/go1.7rc1...go1.7rc2

1.7rc3 has quite a few more changes:
https://github.com/golang/go/compare/go1.7rc2...go1.7rc3

I hope that's helpful.

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Go language - ending?

2016-07-27 Thread Chris Broadfoot
You might want to check out the gopherjs project:
https://github.com/gopherjs/gopherjs

There are no plans for the Go project to have an official target for
WebAssembly.

On Wed, Jul 27, 2016 at 8:02 AM, Alexey Solovey  wrote:

> Hello. Will support of WebAssembly (compilation to JS) in Go language, in
> ending version?
> Hardness: SIMD, Atomics, Threads...
>
> Also, I have question: GO supports SIMD?
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] post method in golang?

2016-07-28 Thread Chris Broadfoot
Try this awesome utility:
https://mholt.github.io/curl-to-go/

On Jul 28, 2016 8:47 PM, "Adrian Lanzafame" 
wrote:

> Hi Victor,
>
> Have you had a look at the net/http package?
> http://golang.org/pkg/net/http
>
> On Fri, 29 Jul 2016 01:01 Victor L  wrote:
>
>> I am using curl for REST call from json file, like the following:
>> curl  -X POST -H "Content-Type: application/json"
>> http://127.0.0.1:8080/v2/apps?force=true -d...@deploy.json
>> How can I translate this to "golang"  POST method? More specifically, how
>> can i create request object from json file?
>> Thanks
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "golang-nuts" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to golang-nuts+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
> --
> Adrian Lanzafame
> Software Developer
>
> m: 0435419266
> e: adrianlanzafam...@gmail.com
> gh: github.com/Lanzafame
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7 Release Candidate 4 is released

2016-08-01 Thread Chris Broadfoot
Hello gophers,

We have just released go1.7rc4, a release candidate for Go 1.7.
It is cut from release-branch.go1.7 at the revision tagged go1.7rc4.

Please help us by testing your Go programs with the release, and report any 
problems using the issue tracker:
  https://golang.org/issue/new

You can download binary and source distributions from the usual place: 
  https://golang.org/dl/#go1.7rc4

To find out what has changed in Go 1.7, read the draft release notes:
  https://tip.golang.org/doc/go1.7

Documentation for Go 1.7 is available at:
  https://tip.golang.org/
  
A comprehensive list of changes since rc3 is here:
  https://github.com/golang/go/compare/go1.7rc3...go1.7rc4
  
We don't plan to release any other release candidates. If no major issues 
are reported, we will issue Go 1.7 in a week's time (August 8).

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7 Release Candidate 5 is released

2016-08-02 Thread Chris Broadfoot
Hello gophers,

We have just released go1.7rc5, a release candidate for Go 1.7.
It is cut from release-branch.go1.7 at the revision tagged go1.7rc5.

rc5 includes three fixes: two to the `go doc` command, and one fix
for time for macOS Sierra Beta 4.

Please help us by testing your Go programs with the release, and
report any problems using the issue tracker:
  https://golang.org/issue/new

You can download binary and source distributions from the usual place: 
  https://golang.org/dl/#go1.7rc5

To find out what has changed in Go 1.7, read the draft release notes:
  https://tip.golang.org/doc/go1.7

Documentation for Go 1.7 is available at:
  https://tip.golang.org/
  
A comprehensive list of changes since rc4 is here:
  https://github.com/golang/go/compare/go1.7rc4...go1.7rc5
  
We still plan to issue Go 1.7 in a week's time (August 8).

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7 Release Candidate 6 is released

2016-08-08 Thread Chris Broadfoot
Hello gophers,

We have just released go1.7rc6, a release candidate for Go 1.7.
Some say that it's the best one yet.
It is cut from release-branch.go1.7 at the revision tagged go1.7rc6.

Please help us by testing your Go programs with the release, and
report any problems using the issue tracker:
  https://golang.org/issue/new

You can download binary and source distributions from the usual place: 
  https://golang.org/dl/#go1.7rc6

To find out what has changed in Go 1.7, read the draft release notes:
  https://tip.golang.org/doc/go1.7

Documentation for Go 1.7 is available at:
  https://tip.golang.org/
  
A comprehensive list of changes since rc5 is here:
  https://github.com/golang/go/compare/go1.7rc5...go1.7rc6
  
We plan to issue Go 1.7 in a week's time (August 15).

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7 is released

2016-08-15 Thread Chris Broadfoot
Hello gophers,

We just released Go 1.7.

You can read the announcement blog post here:
  https://blog.golang.org/go1.7

You can download binary and source distributions from our download page:
  https://golang.org/dl/

To compile from source using a Git checkout, update to the release with 
"git checkout go1.7" and build as usual.

To find out what has changed, read the release notes:
  https://golang.org/doc/go1.7

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Go 1.7 is released

2016-08-15 Thread Chris Broadfoot
Thanks for flagging it. I'm re-building the zip file and it should be
available at golang.org/dl soon.

On Mon, Aug 15, 2016 at 5:03 PM, chai2010  wrote:

> go1.7.windows-amd64.zip missing.
>
> 2016-08-16 7:28 GMT+08:00 Chris Broadfoot :
>
>> Hello gophers,
>>
>> We just released Go 1.7.
>>
>> You can read the announcement blog post here:
>>   https://blog.golang.org/go1.7
>>
>> You can download binary and source distributions from our download page:
>>   https://golang.org/dl/
>>
>> To compile from source using a Git checkout, update to the release with
>> "git checkout go1.7" and build as usual.
>>
>> To find out what has changed, read the release notes:
>>   https://golang.org/doc/go1.7
>>
>> Thanks to everyone who contributed to the release.
>>
>> Chris
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "golang-nuts" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to golang-nuts+unsubscr...@googlegroups.com.
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> --
> https://github.com/golang-china/gopl-zh
> https://github.com/golang-china
> https://github.com/chai2010
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Go 1.7 is released

2016-08-15 Thread Chris Broadfoot
Thanks, it has been added here: https://golang.org/project/

On Mon, Aug 15, 2016 at 5:25 PM, chai2010  wrote:

> and http://127.0.0.1:6060/project/ #release history page have no Go1.7
> release notes.
>
> 2016-08-16 8:20 GMT+08:00 Chris Broadfoot :
>
>> Thanks for flagging it. I'm re-building the zip file and it should be
>> available at golang.org/dl soon.
>>
>> On Mon, Aug 15, 2016 at 5:03 PM, chai2010  wrote:
>>
>>> go1.7.windows-amd64.zip missing.
>>>
>>> 2016-08-16 7:28 GMT+08:00 Chris Broadfoot :
>>>
>>>> Hello gophers,
>>>>
>>>> We just released Go 1.7.
>>>>
>>>> You can read the announcement blog post here:
>>>>   https://blog.golang.org/go1.7
>>>>
>>>> You can download binary and source distributions from our download page:
>>>>   https://golang.org/dl/
>>>>
>>>> To compile from source using a Git checkout, update to the release with
>>>> "git checkout go1.7" and build as usual.
>>>>
>>>> To find out what has changed, read the release notes:
>>>>   https://golang.org/doc/go1.7
>>>>
>>>> Thanks to everyone who contributed to the release.
>>>>
>>>> Chris
>>>>
>>>> --
>>>> You received this message because you are subscribed to the Google
>>>> Groups "golang-nuts" group.
>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>> an email to golang-nuts+unsubscr...@googlegroups.com.
>>>>
>>>> For more options, visit https://groups.google.com/d/optout.
>>>>
>>>
>>>
>>>
>>> --
>>> https://github.com/golang-china/gopl-zh
>>> https://github.com/golang-china
>>> https://github.com/chai2010
>>>
>>
>>
>
>
> --
> https://github.com/golang-china/gopl-zh
> https://github.com/golang-china
> https://github.com/chai2010
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.7.5 and Go 1.8rc3 are released

2017-01-26 Thread Chris Broadfoot
Hello gophers,

We have just released go1.7.5, which includes fixes to the compiler,
runtime, and the crypto/x509 and time packages.
https://golang.org/doc/devel/release.html#go1.7.minor
You can download binary and source distributions from the Go web site:
https://golang.org/dl/ 

We also released go1.8rc3, a release candidate of Go 1.8.
It is cut from release-branch.go1.8 at the revision tagged go1.8rc3.

Thank you to everyone who has helped to test Go 1.8 so far.
Your help is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.8rc3
is by using this tool:
https://godoc.org/golang.org/x/build/version/go1.8rc3

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.8rc3

To find out what has changed in Go 1.8, read the draft release notes:
https://beta.golang.org/doc/go1.8

Documentation for Go 1.8 is available at:
https://beta.golang.org/

Our goal is to release the final version of Go 1.8 on February 1st.

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.8 is released

2017-02-16 Thread Chris Broadfoot
Hello gophers,

We just released Go 1.8.

You can read the announcement blog post here:
  https://blog.golang.org/go1.8

You can download binary and source distributions from our download page:
  https://golang.org/dl/

To compile from source using a Git checkout, update to the release with 
"git checkout go1.8" and build as usual.

To find out what has changed, read the release notes:
  https://golang.org/doc/go1.8

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.8.1 is released

2017-04-07 Thread Chris Broadfoot
Hi gophers,

We have just released Go version 1.8.1, a minor point release.

This release includes fixes to the compiler, runtime, documentation, go 
command, and the
crypto/tls, encoding/xml, image/png, net, net/http, reflect, text/template, 
and time packages. 
https://golang.org/doc/devel/release.html#go1.8.minor

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with "git 
checkout go1.8.1" and build as usual.

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] [security] Go 1.7.6 and Go 1.8.2 are released

2017-05-23 Thread Chris Broadfoot
A security-related issue was recently reported in Go's crypto/elliptic 
package.
To address this issue, we have just released Go 1.7.6 and Go 1.8.2.

The Go team would like to thank Vlad Krasnov and Filippo Valsorda at 
Cloudflare for reporting the issue and providing a fix.

The issue affects Go's P-256 implementation on the 64-bit x86 architecture.

This is CVE-2017-8932 and was addressed by this change: 
https://golang.org/cl/41070, tracked in this issue: 
https://golang.org/issue/20040

Downloads are available at https://golang.org/dl for all supported 
platforms.

We will be releasing Go 1.8.3 later today, which will additionally include 
some non-security fixes.

Cheers,
Chris (on behalf of the Go team)

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.8.3 is released

2017-05-24 Thread Chris Broadfoot
Hi gophers,

We have just released Go version 1.8.3, a minor point release.

This release includes fixes to the compiler, runtime, documentation, and the
database/sql package.
https://golang.org/doc/devel/release.html#go1.8.minor

It also includes the security fix to the crypto/elliptic package from Go
1.8.2.

You can download binary and source distributions from the Go web site:
https://golang.org/dl/

To compile from source using a Git clone, update to the release with "git
checkout go1.8.3" and build as usual.

Thanks to everyone who contributed to the release.

Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.9 Beta 1 is released

2017-06-14 Thread Chris Broadfoot
Hello gophers,

We have just released go1.9beta1, a beta version of Go 1.9.
It is cut from the master branch at the revision tagged go1.9beta1.

There are no known problems or regressions.
Please try running production load tests and your unit tests with the new
version.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.9beta1
is by using this tool:
https://godoc.org/golang.org/x/build/version/go1.9beta1

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.9beta1

To find out what has changed in Go 1.9, read the draft release notes:
https://tip.golang.org/doc/go1.9

Documentation for Go 1.9 is available at:
https://tip.golang.org/

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[go-nuts] Go 1.9 Beta 2 is released

2017-06-26 Thread Chris Broadfoot
Hello gophers,

We have just released go1.9beta2, a beta version of Go 1.9.
It is cut from the master branch at the revision tagged go1.9beta2.

There are no known problems or regressions.
Please try running production load tests and your unit tests with the new
version.
Your help testing these pre-release versions is invaluable.

Report any problems using the issue tracker:
https://golang.org/issue/new

If you have Go installed already, the easiest way to try go1.9beta2
is by using this tool:
https://godoc.org/golang.org/x/build/version/go1.9beta2

You can download binary and source distributions from the usual place:
https://golang.org/dl/#go1.9beta2

To find out what has changed in Go 1.9, read the draft release notes:
https://tip.golang.org/doc/go1.9

Documentation for Go 1.9 is available at:
https://tip.golang.org/

Cheers,
Chris

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [go-nuts] Help with Oauth2 "grant_type=client_credentials"

2020-02-11 Thread Chris Broadfoot
Try this package:
https://pkg.go.dev/golang.org/x/oauth2/clientcredentials?tab=doc

On Tue, Feb 11, 2020, 4:43 PM andrey mirtchovski 
wrote:

> i would strongly advise against implementing advice received online
> for something as important as auth. my suggestion is to work with curl
> from the command line (examples are given on the webpage you linked)
> until you have the process working. implementing that afterwards using
> http.Client will be more or less trivial.
>
> that said, you may be missing a call to SetBasicAuth with the client
> id and secret, or sourcing a JWT beforehand from /oauth/token
>
> On Tue, Feb 11, 2020 at 4:56 PM tmack8080  wrote:
> >
> > Hi,
> >
> >
> >
> > I'm not a programmer.
> >
> > I have this working in PowerShell.
> >
> >
> >
> > Requirement:
> >
> > Query hardware vendor web APIs, using the device serial number, for
> device warranty status.
> >
> >
> >
> > The vendors require that the "client_id" and "client_secret", as well as
> the "grant_type=client_credentials" be passed.
> >
> >
> >
> > All of the documentation I've located discusses using Oauth for 3rd
> party authentication. Obviously, not what I'm doing. Can anyone point me to
> a tutorial that uses "client_credentials"? I've not found one.
> >
> >
> >
> > I tried using the example on the authO website; no luck:
> https://auth0.com/docs/api-auth/tutorials/client-credentials (you have
> select Go from the list of languages). When printing out the 'payload'
> variable I see it appended with a {0 -1} and I'm wondering if that's the
> problem:
> >
> >
> >
> &{client_id=xx&client_secret=xx&grant_type=client_credentials
> 0 -1}
> >
> > {
> >
> >   "error":"invalid_request",
> >
> >   "error_description":"Missing or duplicate parameters"
> >
> > }
> >
> >
> >
> > Thanks in advance.
> >
> > --
> > You received this message because you are subscribed to the Google
> Groups "golang-nuts" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> an email to golang-nuts+unsubscr...@googlegroups.com.
> > To view this discussion on the web visit
> https://groups.google.com/d/msgid/golang-nuts/64214d0a-1191-4f46-8bfd-2c716cdb2d3f%40googlegroups.com
> .
>
> --
> You received this message because you are subscribed to the Google Groups
> "golang-nuts" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to golang-nuts+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/golang-nuts/CAK4xykVkQEspkzQ0D0wuZrznM4P1Mtt1KNXnobR9GZypxbUtrQ%40mail.gmail.com
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/CAM4ZPhBHsK8mK8g4%3Db6oE1yVD77btvoaw03ShkLyW6oV-7YE4Q%40mail.gmail.com.


[go-nuts] Re: [golang-dev] Subject: Go 1.9.2 and Go 1.8.5 are released

2017-10-26 Thread 'Chris Broadfoot' via golang-nuts
Nice! Thank you for maintaining these!

BTW, if it helps, all tarballs are now gpg signed. (add .asc to the
download URL)

On Oct 25, 2017 7:58 PM, "Michael Hudson-Doyle" <
michael.hud...@canonical.com> wrote:

> I've updated my snaps with both these releases, so users with the snap
> already installed should get them soon, or snap install --classic --channel
> 1.9/stable go on an ubuntu or ubuntu-like system if you want to try them
> out :)
>
> Cheers,
> mwh
>
> On 26 October 2017 at 12:51, Chris Broadfoot  wrote:
>
>> Hi gophers,
>>
>> We have just released Go versions 1.9.2 and 1.8.5, minor point releases.
>>
>> These releases include fixes to the compiler, linker, runtime,
>> documentation, go command, and the crypto/x509, database/sql, log, and
>> net/smtp packages. They include a fix to a bug introduced in Go 1.9.1 and
>> Go 1.8.4 that broke "go get" of non-Git repositories under certain
>> conditions.
>>
>> View the release notes for more information:
>> https://golang.org/doc/devel/release.html#go1.9.minor
>>
>> You can download binary and source distributions from the Go web site:
>> https://golang.org/dl/
>>
>> To compile from source using a Git clone, update to the release with "git
>> checkout go1.9.2" and build as usual.
>>
>> Thanks to everyone who contributed to the release.
>>
>> Chris
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "golang-dev" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to golang-dev+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.