# Security Policy

## Supported Versions

We support the past two Go releases (for example, Go 1.17.x and Go 1.18.x when Go 1.18.x is the latest stable release).

See https://go.dev/wiki/Go-Release-Cycle and in particular the
[Release Maintenance](https://go.dev/wiki/Go-Release-Cycle#release-maintenance)
part of that page.

## Reporting a Vulnerability

A GODEBUG setting may not be added if doing so is infeasible,
but that should be extremely rare.

GODEBUG settings added for compatibility will be maintained
for a minimum of two years (four Go releases).
Some, such as `http2client` and `http2server`,
will be maintained much longer, even indefinitely.

When possible, each GODEBUG setting has an associated
[runtime/metrics](/pkg/runtime/metrics/) counter

## Ports {#ports}

### Darwin {#darwin}

<!-- go.dev/issue/64207 -->
As [announced](go1.22#darwin) in the Go 1.22 release notes,
Go 1.23 requires macOS 11 Big Sur or later;
support for previous versions has been discontinued.

### Wasm {#wasm}

<!-- go.dev/issue/63718 -->
The `go_wasip1_wasm_exec` script in `GOROOT/misc/wasm` has dropped support

pkg syscall (netbsd-arm64-cgo), const BPF_OR = 64
pkg syscall (netbsd-arm64-cgo), const BPF_OR ideal-int
pkg syscall (netbsd-arm64-cgo), const BPF_RELEASE = 199606
pkg syscall (netbsd-arm64-cgo), const BPF_RELEASE ideal-int
pkg syscall (netbsd-arm64-cgo), const BPF_RET = 6
pkg syscall (netbsd-arm64-cgo), const BPF_RET ideal-int
pkg syscall (netbsd-arm64-cgo), const BPF_RSH = 112

pkg os, method (*File) WriteString(string) (int, error)
pkg os, method (*LinkError) Error() string
pkg os, method (*PathError) Error() string
pkg os, method (*Process) Kill() error
pkg os, method (*Process) Release() error
pkg os, method (*Process) Signal(Signal) error
pkg os, method (*Process) Wait() (*ProcessState, error)
pkg os, method (*ProcessState) Exited() bool
pkg os, method (*ProcessState) Pid() int

pkg syscall (darwin-arm64), const BPF_NEG ideal-int
pkg syscall (darwin-arm64), const BPF_OR = 64
pkg syscall (darwin-arm64), const BPF_OR ideal-int
pkg syscall (darwin-arm64), const BPF_RELEASE = 199606
pkg syscall (darwin-arm64), const BPF_RELEASE ideal-int
pkg syscall (darwin-arm64), const BPF_RET = 6
pkg syscall (darwin-arm64), const BPF_RET ideal-int
pkg syscall (darwin-arm64), const BPF_RSH = 112

pkg syscall (freebsd-arm64), const BPF_NEG ideal-int
pkg syscall (freebsd-arm64), const BPF_OR = 64
pkg syscall (freebsd-arm64), const BPF_OR ideal-int
pkg syscall (freebsd-arm64), const BPF_RELEASE = 199606
pkg syscall (freebsd-arm64), const BPF_RELEASE ideal-int
pkg syscall (freebsd-arm64), const BPF_RET = 6
pkg syscall (freebsd-arm64), const BPF_RET ideal-int
pkg syscall (freebsd-arm64), const BPF_RSH = 112

## For the release team

At the start of a release development cycle, the contents of `next` should be deleted
and replaced with those of `initial`. From the repo root:

    > cd doc
    > rm -r next/*
    > cp -r initial/* next

Then edit `next/1-intro.md` to refer to the next version.

To prepare the release notes for a release, run `golang.org/x/build/cmd/relnote generate`.

become a go1.XX.txt for XX >= 19.

The next/ directory contains the only files intended to be mutated.
Each file in that directory contains a list of features that may be added
to the next release of Go. The files in this directory only affect the
warning output from the go api tool. Each file should be named
nnnnn.txt, after the issue number for the accepted proposal.

BSD-style license found in the LICENSE file.

### Download and Install

#### Binary Distributions

Official binary distributions are available at https://go.dev/dl/.

After downloading a binary release, visit https://go.dev/doc/install
for installation instructions.

#### Install From Source

If a binary distribution is not available for your combination of
operating system and architecture, visit