[pcwalton]

Until someone actually wants to update their dependencies, writes "go get -u", and breaks the build.

[jessaustin]

Well sure, you probably want to test after updating all of those dependencies. That's a good reason to only update when necessary. Do you argue that some other scheme prevents bugs in dependencies? That hasn't been my experience...