Go语言开源 12 年，明年重点完善泛型和供应链安全

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"当地时间11月10日，Go 核心开发团队技术leader Russ Cox "},{"type":"link","attrs":{"href":"https:\/\/go.dev\/blog\/12years","title":"","type":null},"content":[{"type":"text","text":"发文"}]},{"type":"text","text":"庆祝 Go 语言开源以来的 12 岁生日。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"“博客上最明显的变化是我们"},{"type":"link","attrs":{"href":"https:\/\/go.dev\/blog\/tidy-web","title":"","type":null},"content":[{"type":"text","text":"在 go.dev 上的新家"}]},{"type":"text","text":"，所有的 Go 站点统一整合到一个单一、连贯的网址下。作为整合的另一部分，我们用 "},{"type":"link","attrs":{"href":"https:\/\/pkg.go.dev","title":"","type":null},"content":[{"type":"text","text":"pkg.go.dev"}]},{"type":"text","text":" 替换掉了原先的 godoc.org。”Russ Cox表示，今年是个“多事之年”，并对今年的主要进展作了回顾。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"今年2月，Go 1.16 版本添加了对 macOS ARM64 的支持，以及文件系统接口和嵌入文件、默认启用 modules 等多项改进和优化。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"8 月，Go 1.17 版本添加了对 Windows ARM64 的支持，大大提升了 TLS 密码套件决策的易用性和安全性；引入了修剪模块图 （pruned module graphs），使模块在大型项目中更高效，也添加了及新的、更易读的构建约束语法。Go 1.17 版本还在底层上将 x86-64 的 Go 函数切换至基于寄存器的调用约定， 让 CPU 密集型应用程序的性能提高了 5-15%。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"IDE 方面，支持在 VS Code Go 中默认启用 gopls， 同时为 gopls 和 VS Code Go 提供了多项改进，包括由 Delve 提供支持的强大调试体验。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"此外，除了添加模糊测试支持的新提案，今年还正式提议为 Go 添加泛型，并明确这两者都将在 Go 1.18 中提供。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"据悉，Go 团队本来预计在 Go 1.17 中添加泛型，但后来遗憾表示要推迟。Go Team 也曾在其官方博客表示，大家很期待泛型，因此他们一直在努力，为可投入使用做各种细节的打磨，2021 年这块会是重点。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Russ Cox 亦表示，完善泛型将是他们 2022 年的重点工作之一。Go 1.18 中的初始版本只是一个开始，开发团队需要花时间使用泛型，以便编写最佳实践，以及决定应该将什么添加到标准库和其他库中。他们预计 Go 1.19（预计在 2022 年 8 月发布）及更高版本将进一步完善泛型的设计和实现，并将它们进一步整合到整体 Go 体验中。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"2022 年的另一个工作重点是供应链安全，涉及到被反复提到的依赖性问题，Go 模块的设计提供了可复制、可验证的和经过验证的构建，但还有更多工作要做。从 Go 1.18 开始，go命令将在二进制文件中嵌入更多有关其构建配置的信息，使可复制性更容易并帮助那些需要为 Go 二进制文件生成 SBOM 的项目 。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Russ Cox 提到，他们还开始研究 Go 漏洞数据库以及用于报告程序依赖项中漏洞的相关工具。目标之一是显着提高此类工具的信噪比：如果程序不使用易受攻击的功能，则不进行报告。在2022 年计划将其作为独立工具提供，但也会将其添加到现有工具中，包括goplsVS Code Go 和pkg.go.dev。在改善 Go 供应链安全态势的其他方面，还有更多工作要做。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"Go 团队还开始研究 Go 漏洞数据库以及用于报告程序依赖项中漏洞的相关工具。他们在这项工作中的目标之一是显着提高此类工具的信噪比：如果程序不使用易受攻击的功能，则不会进行报告。在 2022 年期间，团队计划将其作为独立工具提供，同时将其添加到现有工具中。除此之外，在改进 Go 供应链安全态势方面，还有更多工作需要开展。"}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"text","text":"延展阅读："}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/www.infoq.cn\/article\/5ddeyhhxkgsp79gcklec","title":"xxx","type":null},"content":[{"type":"text","text":"《12 年后，Go 终于默认支持泛型》"}]}]},{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"type":"link","attrs":{"href":"https:\/\/www.infoq.cn\/article\/9SS2aGyI3951oBfb3OTP","title":"xxx","type":null},"content":[{"type":"text","text":"《为什么 Go 语言没有泛型》"}]}]}]}