How to properly update third-party packages in Go? (go get, go mod tidy)

Hello everyone! I just started learning Go and switched from JavaScript, where to update packages we simply write `npm update`. In Go, I'm a bit confused. I have a project where I use several third-party libraries, for example `github.com/gorilla/mux` and `github.com/jmoiron/sqlx`. I added them via `go get`, and entries with versions appeared in `go.mod`. Now I want to update these packages to the latest versions, but I don't understand how to do it correctly. I tried writing `go get -u`, but it seems to update everything indiscriminately, and I started having compatibility issues. I've also heard about `go mod tidy`, but I'm not sure what it's for — does it just clean up garbage or does it also update? Additionally, I'm confused that there are a bunch of hashes in `go.sum`, and I'm afraid of accidentally breaking them. Please tell me what the