update-golang-deps

Audit and update Go module dependencies with govulncheck and tiered upgrades.

11|Updated Dec 26, 2025
One-click install
npx skills add https://github.com/ivklgn/ai --skill update-golang-deps
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: update-golang-deps
Source: https://github.com/ivklgn/ai/tree/main/claude/skills/update-golang-deps
Command: npx skills add https://github.com/ivklgn/ai --skill update-golang-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit and update Go module dependencies using the native go toolchain plus govulncheck to ensure security and compatibility.

Core Features & Use Cases

  • Preflight checks to locate go.mod and workspace, detect govulncheck availability, and list outdated modules.
  • Tiered updates (patch → minor → major) with per-tier verification, release notes review, and optional vulnerability checks.
  • Safety-first workflow: uses go mod tidy, avoids manual edits to go.sum, and supports vendor mode when present.

Quick Start

Run the skill in your Go module project to audit outdated dependencies, review proposed upgrades, and apply safe patch-, minor-, and major-version updates with verification.

Frequently Asked Questions about update-golang-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I safely update Go module dependencies and check for vulnerabilities?

To safely update Go module dependencies, use a tiered upgrade workflow with go get, go mod tidy, and govulncheck to apply patch, minor, and major updates while verifying security and compatibility.

What is the best way to upgrade outdated Go modules without breaking compatibility?

The best way to upgrade outdated Go modules is applying tiered updates from patch to major versions, using go list for detection and per-tier verification to ensure compatibility before proceeding.

Does govulncheck work with tiered Go dependency upgrades?

Yes, govulncheck integrates with tiered Go dependency upgrades by performing optional vulnerability checks during each stage, ensuring that patch, minor, and major version updates do not introduce known security issues.

How do I handle v2 module paths and vendor mode when updating Go dependencies?

Updating Go dependencies supports v2 module paths and vendor mode by using the native Go toolchain, avoiding manual edits to go.sum, and automatically running go mod tidy to maintain consistency.

Why should I review release notes before applying a major Go module update?

Reviewing release notes before a major Go module update is necessary because the workflow fetches context via gh Context7 to evaluate breaking changes, ensuring safety and compatibility during the upgrade process.

What preflight checks are needed before updating Go dependencies?

Preflight checks for updating Go dependencies involve locating go.mod, detecting the workspace, checking govulncheck availability, and listing outdated modules to prepare for a safe tiered upgrade.