gogitup v0.6.3 was released on November 11, 2026. This is a maintenance release focused on internal robustness and continuous integration hygiene rather than new user-facing features. There are no changes to commands, flags, or visible behavior, and the update is fully compatible with existing installations.

The release improves the reliability of data handling under the hood and strengthens the project’s security practices, which helps keep the tool dependable for users who rely on gogitup to keep their Go-installed tools current.

What’s new

v0.6.3 migrates all JSON handling to Go’s encoding/json/v2 with stricter parsing validation. The change is internal, but it adds tests for streamed JSON, duplicate keys, invalid UTF-8, case sensitivity, and malformed values to ensure output remains consistent and errors are caught earlier. Output formatting is verified unchanged, with JSON output remaining indented with two spaces and omitempty behavior preserved.

The Go toolchain used for CI builds is updated to 1.27.4, and the repository adds weekly OSV-Scanner vulnerability scans for dependencies. In parallel, legacy workflows for govulncheck-go and add-to-project have been retired in favor of OSV-Scanner and ghook4action, and routine Dependabot updates were applied to CI actions.

No new commands, configuration options, or CLI behavior were added in this release.

Why it matters

For users, v0.6.3 means continued stability with no breaking changes or migration work required. The JSON migration makes the tool more resilient to edge cases in tool metadata without altering the experience of running gogitup check, gogitup upgrade, or gogitup install. Expanded vulnerability scanning in CI reflects ongoing attention to supply-chain security, which contributes to the long-term reliability of releases.

Because the release is maintenance-only, existing tracked tools and configurations continue to work as before.

Upgrading is straightforward. Users can update with go install github.com/UnitVectorY-Labs/gogitup@latest or download pre-built binaries for darwin, linux, and windows from the release page at https://github.com/UnitVectorY-Labs/gogitup/releases/tag/v0.6.3. No configuration changes are needed.

This post was AI-generated. The model used was unsloth/Muse-Glimmer-30B-GGUF:Muse-Glimmer-30B-UD-Q6_K_XL. Reference repository: UnitVectorY-Labs/gogitup, release v0.6.3, date of generation 2026-11-12. Author: release-storyteller.