• https://golang.org/dl/ (Download)

• native_bootstrap

• (2021-06-07) Updated to version: go-1.16.5
• (2021-05-16) Updated to version: go-1.16.4
• (2021-03-13) Updated to version: go-1.16.2
• (2021-02-20) Updated to version: go-1.16
• (2021-01-21) Updated to version: go-1.15.7
• (2020-09-28) Updated to version: go-1.15.2
• (2020-07-18) Updated to version: go-1.15beta1
• (2020-03-20) Updated to version: go-1.13.9
• (2020-01-31) Updated to version: go-1.13.7
• (2020-01-26) Updated to version: go-1.13.6

Log message:
Update to go-1.16.5
This release includes security fixes to the archive/zip, math/big,
net, and net/http/httputil packages, as well as bug fixes to the
linker, the go command, and the net/http package.
ok jsing (maintainer, who noticed I forgot to update plist)

Log message:
Update lang/go to 1.16.4.

Log message:
modgo-gen-modules should use MODGO_MODNAME instead of ALL_TARGET.

Log message:
teach go.port.mk to handle repos with a primary executable in the root
and ancillaries in cmd/, from Josh Rickmar with a tweak from Mikolaj
Kucharski. earlier version ok abieber, I tested all go ports.

Log message:
Update lang/go to 1.16.2

Log message:
Switch lang/go to libc-based syscalls on armv7 and i386.
This is already the case for amd64 and arm64 in Go 1.16. The conversion of
the remaining architectures is still being upstreamed.

Log message:
fix indentation of Makefile tests, this is already complicated enough
without bogus indents

Log message:
Switch lang/go on i386 to use a binary bootstrap.
This allows us to build with GO386=softfloat.
Discussed with abieber@ and sthen@

Log message:
add a "native_bootstrap" pseudo-flavour, similar to jdk's, allowing
build with an existing installed go package. tweak/ok jsing@

Log message:
Add binary bootstrap for mips64/octeon.

Log message:
Bump lang/go binary bootstraps to Go 1.16.

Log message:
s/maching/machine/

Log message:
Update Go to 1.16.
OK jsing@

Log message:
Stop overwriting DISTFILES. This was an oversite on my part. Pointed out by
sthen@.
Tested with a mini-go-bulk.

Log message:
Update Go to 1.15.7
OK jsing@

Log message:
Teach go.port.mk and Go.pm how to escape modules that contain uppercase
letters.
OK kn, make magic from espie/naddy, feedback from afresh1 and sthen.

Log message:
For MODGO_MODULES ports, don't point the port to fetch files directly
from /usr/ports/distfiles when it wants to unpack modules during the
build, instead copy the files into the WRKDIR and point it there.
If there was a mistake with setting up MODGO_MODULES/MODGO_MODFILES
in a port then this change will cause it to show up in build, otherwise
it may succeed or fail randomly depending on what files are present in
distfiles (fetched by other ports).

Log message:
new target modgo-gen-modules for lang/go
It generates the lists for MODGO_MODULES and MODGO_MODFILES
Useful to update go ports.
ok abieber@

Log message:
Update lang/go to 1.15.2.
ok abieber@ naddy@

Log message:
Update Go to 1.15.
OK jsing@

Log message:
regen plist to unbreak packaging on !amd64

Log message:
Bump Go to 1.15beta1.
- Add a permissions fix from sthen@
- Remove patches as they are not needed now
Tested on amd64, arm64, armv7 and i386 (ty sthen!).
armv7 has an intermittent issue with tests.
OK sthen, jsing

Log message:
Add the ability to follow redirected dependencies.
- De-duplicate our .mod and .zip files.
- Move chdir to a child process.
- Break MODGO_MODULES and MODGO_MODFILES values into their own lines
for easier reading.

Log message:
add FIX_CLEANUP_PERMISSIONS and enable it by default on go.port.mk when
using MODGO_MODNAME.
This is needed to work around this issue:
https://github.com/golang/go/issues/27455
which makes `make clean` because of the restrictive permissions.
input and corrections from sthen@ and jca@
ok sthen@ jca@ espie@

Log message:
No need to extract the zip modules either, go takes care of it.
prodded by and ok abieber@

Log message:
Do not extract mod files.

Log message:
SUPDISTFILES is never added to DISTFILES so "make fetch" will not get them.
Move to DISTFILES directly; to be revisited once the go folks are awake but
it should at least fix the breakage seen by naddy@ for now.

Log message:
Teach portgen how to speak Go!
With this a port can be easily generated for Go applications that support Go
modules (there will be a go.mod file in the root of the project).
For example: https://github.com/jrick/domain/blob/master/go.mod
The mod file lists "github.com/jrick/domain" as the module name, so a portgen
command to build the above tool would be:
portgen go github.com/jrick/domain
OK afresh1@ kmos@

Log message:
Update lang/go binary bootstrap to a version that contains no ops following
swi instructions on openbsd/arm.

Log message:
Update lang/go to 1.13.9.

Log message:
Add two no op instructions following swi for Go on openbsd/arm.
arm processors have the same speculative execution flaw that occurs across
a syscall boundary, which was previously addressed in the arm64 port.

Log message:
simpler SEPARATE_BUILD semantics

Log message:
Update lang/go binary bootstrap to a version that contains no ops following
svc instructions on openbsd/arm64.

Log message:
Add two no op instructions following svc for Go on openbsd/arm64.
All except some of the most recent arm64 processors have a speculative
execution flaw that occurs across a syscall boundary, which cannot be
mitigated in the kernel. In order to protect against this leak a
speculation barrier needs to be placed after an svc instruction.
In order to avoid the performance impact of these instructions, the kernel
will soon start returning execution two instructions past the svc call.
For now two hardware no ops are added, which allows syscalls to work with
both old and new kernels. Once the kernel is cut over the no ops can be
replaced with actual speculation barriers.
Discussed at length with deraadt@

Log message:
Update lang/go to 1.13.7.

Log message:
Update lang/go to 1.13.6.

Log message:
Update lang/go to 1.13.5.

Log message:
actually pass ${MAKE_ENV}, GO386=387 wasn't getting correctly passed through
for lang/go itself (though was working for ports built using go.port.mk).

Log message:
include REVISION in PKGSPEC, to trigger updates in dependent packages
due to the i386 SSE->387 change

Log message:
On i386, currently go autodetects SSE at build time, and produces
binaries appropriate for the build machine. This doesn't work for
package builds where packages are produced on a machine with SSE
but are expected to work on machines without. Set GO386=387 during
the build to disable this. OK/improved comment from jsing@.

Log message:
Update lang/go to 1.13.3.
This includes security fixes released in 1.13.2.

Log message:
fix MODGO_PACKAGES and MODGO_TOOLS arch name on aarch64 machines (using
the same arch conversion list as done in the lang/go port itself; add
a comment reminding to keep them in-sync). unbreaks packaging of the
few golang ports that actually build on aarch64.

Log message:
Update lang/go to 1.13.1.
This addresses a security issue in net/http.
ok naddy@

Log message:
Make tests work with PORTS_PRIVSEP=Yes.

Log message:
Set GO111MODULE=off via go.port.mk to prevent external access being
attempted during builds.
Fixes several other packages that break during build.
ok sthen@

Log message:
Enable Go on aarch64/arm64.
ok phessler@

Log message:
poison GOPROXY in the environment during ports build, ports aren't
allowed to access the network at build time and this makes failures
obvious even if you don't use (recommended) PORTS_PRIVSEP.

Log message:
Update the lang/go binary bootstrap to Go 1.13.

Log message:
Update lang/go to Go 1.13.
ok abieber@ sthen@

Log message:
Add support for MODGO_BINDIR to allow go applications to be installed in
an alternative location. Still defaults to bin/.
OK sthen@

Log message:
Update lang/go to 1.12.8.
This includes security fixes to the net/http and net/url packages.

Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes

Log message:
Update lang/go to Go 1.12.7.

Log message:
Update lang/go to 1.12.5

Log message:
No need for a special MODGO_ENV for go.port.mk, just use normal MAKE_ENV
like the rest of the ports tree. This also allows removing a bunch of
manual setting of PATH="${PORTPATH}" HOME="${PORTHOME}" done in various
ports etc. This also makes sure CFLAGS is passed through (not everything
honours it but it does improve at least some ports).
Remove NO_CCACHE from www/honk that was added because the above problem
resulted in ccache variables not being passed through correctly breaking
the cc calls in this.
ok kmos@

Log message:
Ensure GOCACHE refers to a suitable location when building Go.
Issue found and fix verified by phessler@

Log message:
Build lang/go for openbsd/arm using a binary bootstrap.
With input from and ok sthen@.

Log message:
Update lang/go to 1.12.4.

Log message:
Update lang/go to version 1.12.1.

Log message:
Update lang/go to version 1.12.
ok sthen@

Log message:
Go 1.12 requires GOCACHE to be enabled - update go.port.mk appropriately.
ok sthen@

Log message:
Use hw.ncpuonline rather than hw.ncpu to determine how many threads to run.
Prompted by tedu@

Log message:
Update lang/go to 1.11.5.
This includes a security fix to the crypto/elliptic package.

Log message:
Allow weak symbols to be duplicated when already defined.
When -mretpoline is enabled with clang, a __llvm_retpoline_r11 weak symbol
is emitted in each compilation unit. This results in the Go linker
complaining when processing a package archive that contains cgo linkages,
since it finds the same weak symbol defined in multiple object files.
Relax the duplicate symbol detection such that weak symbols are permitted
to be duplicated. This makes it possible to build Go with clang again and
addresses a similar duplicate weak symbol issue that results from retguard.
Also backport an upstream commit that corrects the handling of libgcc vs
libcompiler_rt. Combined with the above fix `make regress` now passes with
both gcc and clang.

Log message:
Update lang/go to version 1.11.4.
This minor revision update includes various fixes, three of which address
security related issues.

Log message:
Update lang/go to 1.11.2.

Log message:
Update lang/go to 1.11.

Log message:
move MODGO_FLAGS+=-x under the DEBUG .if - as jsing pointed out a while
ago, output from this is really very noisy.
since the build with no flags is silent, add -v as a middle ground by
defaulot, so you can see that something is happening during the build,
but without so much console spam.
ok jasper@

Log message:
Simplify do-install, combine/improve find calls, clean up whitespace nits.
No package change.
OK jsing, jca

Log message:
Update to go 1.10.1
OK jsing

Log message:
Update PLIST for lang/go MAP_STACK change.
The MAP_STACK patches create a new source file, however the PLIST was not
updated to include it.
Found the hard way by abieber@ and nigel@

Log message:
Make go work with MAP_STACK.

Log message:
Update lang/go to Go 1.10.
ok jasper@

Log message:
Tweak go.port.mk for Go 1.10.
- Disable the Go 1.10 test caching via GOCACHE - this seems to interact
badly with the ports build infrastructure and does not provide any
real benefit in this environment.
- Provide a MODGO_TEST_FLAGS variable that allows ports to specify test
flags.
ok jasper@

Log message:
Update lang/go to version 1.9.
ok ajacoutot@ jasper@

Log message:
Fix compiler flag handling and --print-libgcc-file-name hack, now that
clang is installed as cc. Allows regress pass again.

Log message:
Make lang/go work with clang.
This requires three changes:
- OpenBSD clang produces __guard_local symbols that are marked as hidden,
which causes problems with the go linker. Workaround this by explicitly
making __guard_local symbols visible when reading in an ELF object.
- OpenBSD clang currently fails to correctly report the compiler runtime
via --print-libgcc-file-name. Workaround this issue by hardcoding it
for the time being.
- The TestCgoConsistentResults test passes successfully outside of ports,
however fails under a ports build. This requires further investigation
but we can just skip the test for now.

Log message:
Update to 1.8.3
ok jsing@

Log message:
Security update to 1.8.2 (CVE-2017-8932)
ok jsing@

Log message:
Use MODGO_post-patch instead of checking for an existing post-patch target.
This will allow go ports to setup a post-patch target when needed.
ok czarkoff@

Log message:
Update lang/go to 1.8.1.

Log message:
unbreak !amd64 packaging, duplicate item in packing-list:
-go/src/cmd/vet/all/whitelist${GOCFG}.txt
+go/src/cmd/vet/all/whitelist/openbsd_amd64.txt

Log message:
Update lang/go to version 1.8.
ok ajacoutot@

Log message:
Export PATH so that things using cgo don't die with, for e.g.
exec "cc" not found in path
s/PATH/PORTPATH/ from sthen@
ok jsing@ sthen@

Log message:
Split -ldflags="-s -w" from MODGO_FLAGS and instead:
- create a new MODGO_LDFLAGS variable
- set MODGO_LDFLAGS to "-s -w" by default (no DEBUG)
- add -ldflags="${MODGO_LDFLAGS}" to the build and test CMDs if
MODGO_LDFLAGS is defined
ok czarkoff@ jsing@

Log message:
Update lang/go to 1.7.4.
This release addresses a security issue with net/http package's
Request.ParseMultipartForm method:
https://golang.org/doc/devel/release.html#go1.7.minor
ok jasper@

Log message:
make go libraries build- and run-depend on particular version of lang/go
Go libraries should be rebuilt on every lang/go update.  This change adds
runtime dependency on lang/go for ports with "lib" in MODGO_TYPE, and tunes
PKGSPEC to force dependency on exact version of go.
OK jsing@, "makes sense" sthen@

Log message:
Upgrade lang/go to 1.7.
ok czarkoff@ pea@

Log message:
Properly strip go binaries when !DEBUG.
On big executables, size drops by ~40%.
with and ok czarkoff@

Log message:
Security update to 1.6.3 (CVE-2016-5386)
ok jsing@, naddy@

Log message:
Update lang/go to handle the sys_thrkill/sys_kill change.
Partially based on a diff from Ray Lai.

Log message:
Allow single go port install both binaries and libraries
OK jsing@ kspillner@

Log message:
Update lang/go to 1.6.2.

Log message:
Allow lang/go to generate PT_TLS when cgo is used on OpenBSD. This makes
Go 1.6 pass regress on openbsd/386 and openbsd/amd64. Also stop exporting
environ and __progname from cgo, since these symbols are no longer required
by libc.

Log message:
Stop using sigreturn from the Go openbsd/386 signal trampoline - the
sigreturn syscall is going away in future versions of OpenBSD and its
use for Go is already broken due to the trampoline return checks. Instead
just return directly from the signal trampoline (as we have always done
for Go openbsd/amd64).
Also fix a bug in the Go openbsd/386 linker, which results in symbols in
the dynamic symbol table being emitted with a size of zero. With a current
ld.so, this results in symbol mismatch warnings.
Unbreaks the Go port on openbsd/386, however it still fails to pass regress
due to the PT_TLS changes.

Log message:
bump MODGO_BUILD_DEPENDS to lang/go>=1.6
some ports that used to depend on GO15VENDOREXPERIMENT=1 need 1.6 or they
won't build as the usage of that variable has been removed in their Makefiles.
ok czarkoff@ sthen@

Log message:
update to go 1.6
OK jsing (MAINTAINER)

Log message:
simplify MODGO_CMD environment customization
Clear user's environment with SETENV and provide MODGO_ENV for adding variables
to environment and MODGO_GOPATH for altering GOPATH.
OK ajacoutot@, jasper@, kspillner@

Log message:
use INSTALL_DATA instead of cp for go libraries
OK ajacoutot@ sthen@

Log message:
Set INSTALL_STRIP= for go ports
OK ajacoutot@, sthen@

Log message:
Update to go 1.5.4. OK jasper@ jsing@ (MAINTAINER).
https://groups.google.com/forum/#!topic/golang-announce/9eqIHqaWvck
"Go's crypto libraries passed certain parameters unchecked to the
underlying big integer library, possibly leading to extremely
long-running computations, which in turn makes Go programs vulnerable to
remote denial of service attacks.  Programs using HTTPS client
certificates or the Go SSH server libraries are both exposed to this
vulnerability.
This is CVE-2016-3959 and was addressed by this change:
https://golang.org/cl/21533
Thanks to David Wong for identifying this issue."

Log message:
Update to go 1.5.4. OK jasper@ jsing@ (MAINTAINER).
https://groups.google.com/forum/#!topic/golang-announce/9eqIHqaWvck
"Go's crypto libraries passed certain parameters unchecked to the
underlying big integer library, possibly leading to extremely
long-running computations, which in turn makes Go programs vulnerable to
remote denial of service attacks.  Programs using HTTPS client
certificates or the Go SSH server libraries are both exposed to this
vulnerability.
This is CVE-2016-3959 and was addressed by this change:
https://golang.org/cl/21533
Thanks to David Wong for identifying this issue."

Log message:
Fix MODGO_INSTALL_TARGET so that timestamps would be preserved.  This should fix
issue with go ports rebuilding their dependencies and failing to install them.
Based on input from Nigel Taylor.
OK ajacoutot@

Log message:
Rework go.port.mk to install packages in /usr/local/go-pkg and build
without -a, -work and without running things through sed and piping to
shell:
- Install additional packages under /usr/local/go-pkg and include this in
GOPATH when building. Go considers anything under the GOROOT to be part
of the standard library, which introduces various problems. In particular
they do not get rebuilt without the -a flag.
- Using 'go build -a' is unnecessary (at least now that we're not
installing in GOROOT). Furthermore, the semantics of -a have changed
between go1.4 and go1.5. In go1.4 the standard library was excluded from
the -a flag whereas for go1.5 it does mean all dependencies including the
standard library (this was the same for go1.3). However, there is
already blanket 'do not rebuild standard library packages' in place when
the -a flag is NOT specified.
- Avoid -work since it leaves the work directory behind and nothing is
currently cleaning it up.
- Overall, avoid running 'go install -x' and piping the results through
sed and sh. Firstly, 'go install -x' is already running those commands,
then they're being run a second time around via sh. Secondly, there are
cases where replacing GOROOT is incorrect.
ok jasper@ sthen@ kspillner@ czarkoff@

Log message:
Update lang/go to 1.5.3.
This release addresses CVE-2015-8618.
ok ajacoutot@ sthen@

Log message:
Update to Go 1.5.2.
This also installs in a manner that allows /usr/local/go to now be used for
GOROOT_BOOTSTRAP, if building from source.
ok jasper@

Log message:
backport various security fixes:
- CVE-2015-5739, "Content Length" treated as valid header
- CVE-2015-5740, Double content-length headers does not return 400 error
- CVE-2015-5741, Additional hardening, not sending Content-Length w/Transfer-Encoding, Closing connections
from upstream git
ok jsing@ (MAINTAINER), czarkoff@

Log message:
backport various security fixes from upstream git:
- CVE-2015-5739, "Content Length" treated as valid header
- CVE-2015-5740, Double content-length headers does not return 400 error
- CVE-2015-5741, Additional hardening, not sending Content-Length w/Transfer-Encoding, Closing connections
ok jsing@ (MAINTAINER), czarkoff@

Log message:
backport various security fixes:
- CVE-2015-5739, "Content Length" treated as valid header
- CVE-2015-5740, Double content-length headers does not return 400 error
- CVE-2015-5741, Additional hardening, not sending Content-Length w/Transfer-Encoding, Closing connections
from upstream git
ok jsing@ (MAINTAINER), czarkoff@

Log message:
add lang/go to CATEGORIES
ok czarkoff@

Log message:
Don't call go with "-a" flag when building binaries.  Allow overriding
MODGO_FLAGS in ports that need to do so.
OK ajacoutot@, kspillner@, sthen@

Log message:
Refactor lang/go module
From port-modules(5):
lang/go       Adds Go toolchain support.  Requires ALL_TARGET to be set
to canonical Go import path of port.  (Module sets it
automatically for ports that use GH_ACCOUNT and GH_PROJECT
macros.)
During execution of post-patch target module moves source
code from ${MODGO_SUBDIR} to ${WRKSRC}, subdirectory of
${MODGO_WORKSPACE} - specially-crafted Go workspace located
at ${WRKDIR}/go.  During do-build module calls ``go
install'' with GOPATH set to ${MODGO_WORKSPACE}, runs its
output through sed to prevent writes outside WRKDIR sandbox
and sends output to sh(1).  During do-install it copies
executables from ${MODGO_WORKSPACE}/bin to ${PREFIX}/bin,
and/or directories ${MODGO_WORKSPACE}/pkg and
${MODGO_WORKSPACE}/src to ${PREFIX}/go, depending on
MODGO_TYPE contents.
Sets BUILD_DEPENDS, RUN_DEPENDS, ALL_TARGET, TEST_TARGET,
ONLY_FOR_ARCHS, SEPARATE_BUILD, and WRKSRC.
Defines:
MODGO_TYPE       Type of port.  May be any combination of:
bin  ordinary binary, which should be
installed to ${PREFIX}/bin,
lib  library, which should come with
source code.
Defaults to bin.
MODGO_WORKSPACE  Path to Go workspace set up for port build
process.  Defaults to ${WRKDIR}/go.  See
Go documentation for details.
MODGO_SUBDIR     Path to Go source code within port's
sources tarball.  Defaults to ${WRKDIST}.
MODGO_SETUP_WORKSPACE
Commands setting up Go workspace for
building ports.  By default, happens
during execution of post-patch target.
MODGO_BUILDDEP   Controls whether contents of
MODGO_BUILD_DEPENDS are appended to port's
BUILD_DEPENDS.  Defaults to Yes.
Additionally defines MODGO_PACKAGES, MODGO_SOURCES and
MODGO_TOOLS (paths for installed Go packages, sources and
tools respectively), MODGO_CMD and MODGO_FLAGS (source code
build command and flags passed as its arguments),
MODGO_BUILD_CMD and MODGO_TEST_CMD (commands for building
and testing go packages; normally called with canonical Go
package names as arguments),
MODGO_{BUILD,INSTALL,TEST}_TARGET and
MODGO_{BUILD,RUN}_DEPENDS.
OK sthen@

Log message:
add beginnings for a golang module
input and ok jsing@ kspillner@ sthen@

Log message:
update to go 1.4.2
- http://golang.org/doc/devel/release.html#go1.4.minor
ok jsing@

Log message:
Switch to using GO_ARCHS.
ok jsing@

Log message:
Update lang/go to 1.4.1.
ok sthen@ rpe@

Log message:
Update lang/go to version 1.4.
ok bmercer@ daniel@ sthen@

Log message:
Update lang/go to 1.3.3.
ok sthen@