Hi HN! I built gopin to solve a gap in my dependency management workflow.

Renovate and Dependabot keep my CI workflows updated automatically, but they don't touch go install commands in them. I was stuck manually checking and updating versions for tools like golangci-lint, goimports, etc.

gopin fixes this by: - Pinning @latest to actual versions (e.g., @latest → @v2.6.2) - Updating outdated pinned versions to the latest (e.g., @v2.5.0 → @v2.6.2)

It queries proxy.golang.org and rewrites your files in-place:

  gopin run --dry-run  # Preview changes
  gopin run            # Apply

GitHub: https://github.com/nnnkkk7/gopin

Would love feedback – especially if there are edge cases I missed!