Microsoft build of Go v1.26.1-1

What's Changed

• [release-branch.go1.26] implement loong64 assembly for CGO-less by @gdams in #2146
• [release-branch.go1.26] Include revision in Microsoft-specific version string (#2140) by @dagood in #2160
• [release-branch.go1.26] Refer to FIPS 1.26 changelog, remove unclear statement by @dagood in #2174
• Update submodule to latest release-branch.go1.26 in microsoft/release-branch.go1.26 by @bot-for-go[bot] in #2177

Full Changelog: v1.26.0-1...v1.26.1-1

Microsoft build of Go v1.25.8-1

What's Changed

• [release-branch.go1.25] Disable innerloop network isolation by @dagood in #2115
• Update submodule to latest release-branch.go1.25 in microsoft/release-branch.go1.25 by @bot-for-go[bot] in #2128
• [release-branch.go1.25] Backport infrastructure fixes by @dagood in #2155
• Update submodule to latest release-branch.go1.25 in microsoft/release-branch.go1.25 by @bot-for-go[bot] in #2176

Full Changelog: v1.25.7-1...v1.25.8-1

Microsoft build of Go v1.26.0-1

What's Changed

Toolchain

The GOCACHE environment variable now defaults to os.UserCacheDir()/ms-go-build instead of os.UserCacheDir()/go-build.

The buildinfo embedded at build time now includes Microsoft-specific version information in a new microsoft_toolset_version setting.
A new GODEBUG setting ms_version=1 changes runtime.Version() to return the Microsoft-specific version string.
A new linker flag -ms_upstreamversion=0 uses the Microsoft-specific version as the main Go version embedded in the output instead of the upstream version.
For more information, see the Additional Features document.

Systemcrypto

See the FIPS documentation Go 1.26 changelog for more information.

Configuration

You can disable systemcrypto at build time by setting the environment variable MS_GO_NOSYSTEMCRYPTO to 1.

Backends

Windows

Setting the FIPS preference to enabled will no longer cause a panic when the Windows FIPS policy is disabled.

OpenSSL

Improved support for the Fedora OpenSSL FIPS provider.

Binaries can now be built without using cgo by setting GOEXPERIMENT=ms_nocgo_opensslcrypto.

Darwin

The backend is no longer in preview and is now fully supported.
It is enabled by default on macOS.

Building a program that uses this backend no longer requires cgo.

Supported Algorithms

The following hash functions are now implemented using the systemcrypto backends:

• SHA-3-224
• SHA-3-256
• SHA-3-384
• SHA-3-512
• SHAKE-128
• SHAKE-256

The following ECDH curves are now implemented using the systemcrypto backends:

• X25519

The following ML-KEM sizes are now implemented using the systemcrypto backends:

• 768
• 1024

The following TLS groups are now implemented using the systemcrypto backends:

• X25519
• X25519MLKEM768
• SecP256r1MLKEM768
• SecP384r1MLKEM1024

The following TLS cipher suites are now implemented using the systemcrypto backends:

• TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
• TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
• TLS_CHACHA20_POLY1305_SHA256
• TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
• TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305

TLS Settings

The TLS curves X25519 and X25519MLKEM768 can be disabled using the GODEBUG setting ms_tlsx25519=0.

The TLS default settings are now aligned with Microsoft TLS internal policies.
This behavior can be disabled using the GODEBUG setting ms_tlsprofile=off.
The changes from standard Go TLS default settings are:

• TLS cipher suites using AES-256 are now preferred over those using AES-128.
• TLS cipher suites using CHACHA20_POLY1305 are no longer preferred over AES-GCM cipher suites when the client or server supports hardware acceleration for AES.
• TLS groups supported by the systemcrypto backends are now preferred over those that are not.

Microsoft build of Go v1.25.7-1

What's Changed

• Update submodule to latest release-branch.go1.25 in microsoft/release-branch.go1.25 by @bot-for-go[bot] in #2112

Full Changelog: v1.25.6-1...v1.25.7-1

Microsoft build of Go v1.24.13-1

What's Changed

• Update submodule to latest release-branch.go1.24 in microsoft/release-branch.go1.24 by @bot-for-go[bot] in #2111

Full Changelog: v1.24.12-1...v1.24.13-1

Microsoft build of Go v1.25.6-1

What's Changed

• Update submodule to latest release-branch.go1.25 in microsoft/release-branch.go1.25 by @bot-for-go[bot] in #2057
• [release-branch.go1.25] Use useOptimizedSDLTasks: false to fix build break by @dagood in #2067

Full Changelog: v1.25.5-1...v1.25.6-1

Microsoft build of Go v1.24.12-1

What's Changed

• Update submodule to latest release-branch.go1.24 in microsoft/release-branch.go1.24 by @bot-for-go[bot] in #2058
• [release-branch.go1.24] Use useOptimizedSDLTasks: false to fix build break by @dagood in #2066

Full Changelog: v1.24.11-1...v1.24.12-1

Microsoft build of Go v1.25.5-1

What's Changed

• Update submodule to latest release-branch.go1.25 in microsoft/release-branch.go1.25 by @bot-for-go[bot] in #1980

Full Changelog: v1.25.4-2...v1.25.5-1

Microsoft build of Go v1.24.11-1

What's Changed

• Update submodule to latest release-branch.go1.24 in microsoft/release-branch.go1.24 by @bot-for-go[bot] in #1981

Full Changelog: v1.24.10-1...v1.24.11-1

Microsoft build of Go v1.25.4-2

What's Changed

• Upload cgo status counters by @qmuntal in #1946
• Update submodule to latest release-branch.go1.25 in microsoft/release-branch.go1.25 by @bot-for-go[bot] in #1949

Full Changelog: v1.25.4-1...v1.25.4-2