NVIDIA / gpu-operator / 40946669518

37%

main: 37%

Pull #3137

github

migrate to Masterminds/semver

This change switches to the Masterminds/semver for semver processing
over golang.org/x/mod. This is motivated by the following reasons:

- golang.org/x/mod is a module meant for interacting with go modules primarily
- golang.org/x/mod has had CVEs associated with it in the past.
Masterminds/semver does not import any other module itself so the overall
CVE surface is reduced with this change.

Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>

7 of 9 new or added lines in 3 files covered. (77.78%)

6015 of 16189 relevant lines covered (37.15%)

0.37 hits per line