> It's not like vgo makes it hard to upgrade all dependencies to their most recent version - it's done automatically with a single command, if you want it.
And how does it guarantee that this actually results in anything that works, if upper bounds are not supported?