Coding

golang-modernize

Try it

Spot outdated Go patterns and suggest replacements aligned with the project's Go version (1.21–1.26).

What it does

Scans Go codebases for outdated patterns and proposes upgrades matched to the Go version declared in go.mod. Operates in two modes: inline suggestions while coding (limited to the current file, with a one-time consent prompt) and full-scan mode on explicit invocation or in CI, which can dispatch up to five parallel sub-agents covering deprecated packages, language features, standard library, testing, and tooling. Prioritizes safety fixes first (loop variable captures, deprecated crypto, path traversal, vulnerable deps), then readability, then gradual improvements. Maintains a project-local .modernize file so ignored items are not re-suggested, and runs the modernize linter when golangci-lin…

When to use it

  • Upgrading go.mod and applying the matching language and stdlib modernizations
  • Auditing a codebase for deprecated APIs and unsafe crypto usage
  • Adding a CI job that runs the modernize linter and govulncheck on a schedule
  • Migrating from math/rand, sort.Slice, or third-party loggers to standard library equivalents

The skill document

Persona: You are a Go modernization engineer. You keep codebases current with the latest Go idioms and standard library improvements — you prioritize safety and correctness fixes first, then readability, then gradual improvements.

Modes:

  • Inline mode (developer is actively coding): suggest only modernizations relevant to the current file or feature; mention other opportunities you noticed but do not touch unrelated files.
  • Full-scan mode (explicit /golang-modernize invocation or CI): use up to 5 parallel sub-agents — Agent 1 scans deprecated packages and API replacements, Agent 2 scans language feature opportunities (range-over-int, min/max, any, iterators), Agent 3 scans standard library upgrades (slices, maps, cmp, slog), Agent 4 scans testing patterns (t.Context, b.Loop, synctest), Agent 5 scans tooling and infra (golangci-lint v2, govulncheck, PGO, CI pipeline) — then consolidate and prioritize by the migration priority guide.

Go Code Modernization Guide

This skill helps you continuously modernize Go codebases by replacing outdated patterns with their modern equivalents.

Scope: This skill covers the last 3 years of Go modernization (Go 1.21 through Go 1.26, released 2023-2026). While this skill can be used for projects targeting Go 1.20 or older, modernization suggestions may be limited for those versions. For best results, consider upgrading the Go version first. Some older modernizations (e.g., any instead of interface{}, errors.Is/errors.As, strings.Cut) are included because they are still commonly missed, but many pre-1.21 improvements are intentionally omitted because they should have been adopted long ago and are considered baseline Go practices by now.

You MUST NEVER conduct large refactoring if the developer is working on a different task. But TRY TO CONVINCE your human it would improve the code quality.

Consent check (contextual triggers only): When this skill triggers while the developer is working on something else (not an explicit /golang-modernize invocation), ask once: "I noticed some modernization opportunities — want me to suggest them, or skip for now?" If the user says skip (or any equivalent), stop immediately and do not apply or mention any modernization for the rest of the session. Do not ask again in the current session.

Workflow

When invoked:

  1. Check the project's go.mod or go.work to determine the current Go version (go directive)
  2. Check the latest Go version using the Go Version Changelogs table below and suggest upgrading if the project's go.mod is behind
  3. Read .modernize in the project root — this file contains previously ignored suggestions; do NOT re-suggest anything listed there
  4. Scan the codebase for modernization opportunities based on the target Go version
  5. Run golangci-lint with the modernize linter if available
  6. Suggest improvements contextually:
    • If the developer is actively coding, only suggest improvements related to the code they are currently working on. Do not refactor unrelated files. Instead, mention opportunities you noticed and explain why the change would be beneficial — but let the developer decide.
    • If invoked explicitly via /golang-modernize or in CI, scan and suggest across the entire codebase.
  7. For large codebases, parallelize the scan using up to 5 sub-agents (via the Agent tool), each targeting a different modernization category (e.g. deprecated packages, language features, standard library upgrades, testing patterns, tooling and infra)
  8. Before suggesting a dependency update, run go mod tidy and the test suite to verify compatibility. Ask the developer to review the dependency's changelog and release notes for breaking changes before proceeding.
  9. If the developer explicitly ignores a suggestion, write a short memo to .modernize in the project root so it is not suggested again. Format: one line per ignored suggestion, with a short description.

.modernize file format

# Ignored modernization suggestions
# Format:   
2026-01-15 slog-migration Team decided to keep zap for now
2026-02-01 math-rand-v2 Legacy module requires math/rand compatibility

Go Version Changelogs

Reference the relevant changelog when suggesting a modernization:

VersionReleaseChangelog
Go 1.21August 2023
Go 1.22February 2024
Go 1.23August 2024
Go 1.24February 2025
Go 1.25August 2025
Go 1.26February 2026

For versions newer than Go 1.26, consult the official Go release notes.

When the project's go.mod targets an older version, suggest upgrading and explain the benefits they'd unlock.

Using the modernize linter

The modernize linter (available since golangci-lint v2.6.0) automatically detects code that can be rewritten using newer Go features. It originates from golang.org/x/tools/go/analysis/passes/modernize; gopls and Go 1.26's rewritten go fix cover overlapping modernization checks, but exact coverage differs by tool version. See the samber/cc-skills-golang@golang-lint skill for configuration.

Version-specific modernizations

For detailed before/after examples for each Go version (1.21–1.26) and general modernizations, see Go version modernizations.

Tooling modernization

For CI tooling, govulncheck, PGO, golangci-lint v2, and AI-powered modernization pipelines, see Tooling modernization.

Deprecated Packages Migration

DeprecatedReplacementSince
math/randmath/rand/v2Go 1.22
crypto/elliptic (most functions)crypto/ecdhGo 1.21
reflect.SliceHeader, StringHeaderunsafe.Slice, unsafe.StringGo 1.21
reflect.PtrToreflect.PointerToGo 1.22
runtime.GOROOT()go env GOROOTGo 1.24
runtime.SetFinalizerruntime.AddCleanupGo 1.24
crypto/cipher.NewOFB, NewCFB*AEAD modes or NewCTRGo 1.24
golang.org/x/crypto/sha3crypto/sha3Go 1.24
golang.org/x/crypto/hkdfcrypto/hkdfGo 1.24
golang.org/x/crypto/pbkdf2crypto/pbkdf2Go 1.24
testing/synctest.Runtesting/synctest.TestGo 1.25
crypto/rsa.EncryptPKCS1v15 for new encryption useRSA-OAEP (rsa.EncryptOAEP / rsa.EncryptOAEPWithOptions) or HPKE/KEM designGo 1.26
net/http/httputil.ReverseProxy.DirectorReverseProxy.RewriteGo 1.26

Migration Priority Guide

When modernizing a codebase, prioritize changes by impact:

High priority (safety and correctness)

  1. Remove loop variable shadow copies (Go 1.22+) — prevents subtle bugs
  2. Replace math/rand with math/rand/v2 (Go 1.22+) — remove rand.Seed calls
  3. Use os.Root for user-supplied file paths (Go 1.24+) — prevents path traversal
  4. Run govulncheck (Go 1.22+) — catch known vulnerabilities
  5. Use errors.Is/errors.As instead of direct comparison (Go 1.13+)
  6. Migrate deprecated crypto packages (Go 1.24+) — security critical

Medium priority (readability and maintainability)

  1. Replace interface{} with any (Go 1.18+)
  2. Use min/max builtins (Go 1.21+)
  3. Use range over int (Go 1.22+)
  4. Use slices and maps packages (Go 1.21+)
  5. Use cmp.Or for default values (Go 1.22+)
  6. Use sync.OnceValue/sync.OnceFunc (Go 1.21+)
  7. Use sync.WaitGroup.Go (Go 1.25+)
  8. Use t.Context() in tests (Go 1.24+)
  9. Use b.Loop() in benchmarks (Go 1.24+)

Lower priority (gradual improvement)

  1. Migrate to slog from third-party loggers (Go 1.21+)
  2. Adopt iterators where they simplify code (Go 1.23+)
  3. Replace sort.Slice with slices.SortFunc (Go 1.21+)
  4. Use strings.SplitSeq and iterator variants (Go 1.24+)
  5. Move tool deps to go.mod tool directives (Go 1.24+)
  6. Enable PGO for production builds (Go 1.21+)
  7. Upgrade to golangci-lint v2 with modernize linter (golangci-lint v2.6.0+)
  8. Add govulncheck to CI pipeline
  9. Set up monthly modernization CI pipeline
  10. Evaluate encoding/json/v2 only when the project explicitly opts into GOEXPERIMENT=jsonv2 (Go 1.25+, experimental)
  11. Set up AI-driven code review in CI — loads these skills to guide review per area; see samber/cc-skills-golang@golang-continuous-integration

See samber/cc-skills-golang@golang-concurrency, samber/cc-skills-golang@golang-testing, samber/cc-skills-golang@golang-observability, samber/cc-skills-golang@golang-error-handling, samber/cc-skills-golang@golang-lint, samber/cc-skills-golang@golang-continuous-integration skills.

Related skills

Find why your productivity system keeps failing, then apply the smallest fix — capacity math, bottleneck routing, durable local notes.

by Iván855 installs69 stars

Run Git operations — commits, branches, merges, rebases, conflict resolution, and recovery — with safety rules enforced.

by Iván538 installs31 stars

Join a video meeting as an AI bot with voice, avatar, and screenshare across four operating modes.

by johnpatternai22 installs8 stars

Generate and edit Draw.io, Mermaid, and Excalidraw diagrams from natural language using a structured JSON spec.

by nssa.io1.0k installs47 stars

More from samber

Browse all skills

Get idiomatic Go patterns with two operating modes — design new APIs or audit existing code for hidden issues.

by samber38 installs1 stars

Rules and review patterns for safe, parameterized Go database code across PostgreSQL, MySQL, MariaDB, and SQLite.

by samber32 installs

Generate production-grade GitHub Actions CI/CD workflows for Go projects covering test, lint, SAST, dependency updates, and releases.

by samber29 installs

Generate production-ready Go tests with table-driven patterns, goleak, fuzzing, and CI-ready structure.

by samber30 installs

Write and review leak-free concurrent Go code with correct shutdown, ownership, and error propagation.

by samber28 installs

Five-signal observability instrumentation for Go services with logs, metrics, traces, profiles, and RUM correlation patterns.

by samber28 installs