GoBump is a simple command-line tool written in Go that allows you to update the versions of your Go dependencies.

gobump --packages=<package@version> ... --modroot=<path to go.mod>

• --packages: A space-separated list of packages to update. Each package should be in the format package@version.
• --modroot: Path to the go.mod root. If not specified, it defaults to the current directory.
• --replaces: A space-separated list of packages to replace. Each entry should be in the format old=new@version.
• --go-version: set the go-version for 'go mod tidy' command, default to the go version in the build environment.
• --show-diff: Show the difference between the original and 'go.mod' files.
• --tidy: Run 'go mod tidy' command.
• --bump-file: Specify the yaml file where to read the bump instructions from

gobump --packages="github.com/pkg/[email protected] golang.org/x/[email protected]" --modroot=/path/to/your/project

This will update the versions of github.com/pkg/errors and golang.org/x/mod in your go.mod file.

Create a file bumps.yaml

packages:
  - name: github.com/pkg/errors
    version: v0.9.1
  - name: golang.org/x/mod
    version: v0.4.2

And it does the same as above flags. You can also specify replace and require in the yaml fields. Some examples. Note Index field is not used.

Go 1.20 or later

To install gobump, you can use go install:

go install github.com/chainguard-dev/gobump@latest

Contributions are welcome! Please submit a pull request on GitHub.