fix: adding golang update strategy (#34)

# Conflicts:
#	golang/README.md
#	golang/action.yml

Author: dotkas

golang/README.md

@@ -3,7 +3,7 @@
 This GitHub Action automatically updates Go module dependencies and creates a pull request with the changes.
 
 > [!IMPORTANT]  
-> This action updates dependencies using `go get -u` and thus does not update to new major versions.
+> This action updates dependencies using `go get -u` (by default) and thus does not update to new major versions. You can customize this behavior using the `strategy` input parameter.
 
 ## :rocket: Usage
 
@@ -24,6 +24,7 @@ jobs:
           token: ${{ github.token }}
           base-branch: 'main'
           branch-prefix: 'update-go-deps'
+          strategy: 'controlled' # or 'direct', 'everything'
 ```
 
 ## :gear: Inputs
@@ -36,6 +37,40 @@ jobs:
 | `pr-title`       | Title for the pull request                          | :x:                | `Update Golang Dependencies` |
 | `commit-message` | Commit message for the update                       | :x:                | `Update Golang dependencies` |
 | `auto-merge`     | Wether automatic merge should be enabled for the PR | :x:                | `false`                      |
+| `strategy`       | Dependency update strategy                          | :x:                | `controlled`                 |
+
+## 📋 Update Strategies
+
+The `strategy` parameter controls how dependencies are updated:
+
+### `controlled` (default)
+
+Updates direct dependencies and their transitive dependencies while respecting version constraints. Uses `go get -t -u ./...` for a safe, tested update approach.
+
+**Best for:** Most use cases where stability and compatibility are important.
+
+### `direct`
+
+Updates only direct dependencies (those explicitly listed in `go.mod`) to their latest versions, ignoring indirect dependencies.
+
+```bash
+go list -m -f '{{if not .Indirect}}{{.Path}}{{end}}' all \
+  | xargs -n1 go get -u
+```
+
+**Best for:** When you want to update only the dependencies you directly control.
+
+### `everything`
+
+Updates all dependencies, including indirect ones, to their latest available versions. This is the most aggressive strategy and may introduce breaking changes.
+
+```bash
+go list -m -u all \
+  | awk '/\[/ { print $1 "@" substr($2,2,length($2)-2) }' \
+  | xargs -n1 go get
+```
+
+**Best for:** When you want the absolute latest versions and are willing to handle breaking changes.
 
 ## :warning: Prerequisites
 

golang/action.yml

@@ -33,6 +33,11 @@ inputs:
     description: 'Whether a successful PR should be automatically merged'
     default: 'false'
 
+  strategy:
+    required: false
+    description: 'Strategy for updating dependencies (controlled, direct, or everything)'
+    default: 'controlled'
+
 runs:
   using: 'composite'
   steps:
@@ -48,12 +53,30 @@ runs:
         cache: true
         cache-dependency-path: '**/go.sum'
 
-    - name: Update dependencies
+    - name: Update dependencies (controlled)
+      if: ${{ inputs.strategy == 'controlled' }}
       shell: bash
       run: |
         go get -t -u ./...
         go mod tidy
 
+    - name: Update dependencies (direct)
+      if: ${{ inputs.strategy == 'direct' }}
+      shell: bash
+      run: |
+        go list -m -f '{{if not .Indirect}}{{.Path}}{{end}}' all \
+          | xargs -n1 go get -u
+        go mod tidy
+
+    - name: Update dependencies (everything)
+      if: ${{ inputs.strategy == 'everything' }}
+      shell: bash
+      run: |
+        go list -m -u all \
+        | awk '$NF ~ /^\[v/ { v=$NF; gsub(/[\[\]]/, "", v); print $1 "@" v }'
+        | xargs -n1 go get
+        go mod tidy
+
     - name: Check for changes
       id: check_changes
       uses: alchemaxinc/composite-toolbox/check-changes@v1
@@ -76,6 +99,14 @@ runs:
 
           This pull request automatically updates Go module dependencies to their latest versions.
 
+          ## :gear: Update Strategy
+
+          **Strategy Used:** `${{ inputs.strategy }}`
+
+          - **controlled**: Updates direct dependencies and their transitive dependencies while maintaining version constraints
+          - **direct**: Updates only direct dependencies to their latest versions
+          - **everything**: Updates all dependencies including indirect ones to their latest versions
+
           ## :warning: Important Notes
 
           - :robot: This PR was **automatically generated**