NVIDIA / gpu-operator / 40975259973

40%

main: 37%

Pull #3148

github

migrate to Masterminds/semver

This change switches to the Masterminds/semver for semver processing
over golang.org/x/mod. This is motivated by the following reasons:

- golang.org/x/mod is a module meant for interacting with go modules primarily
- golang.org/x/mod has had CVEs associated with it in the past.
Masterminds/semver does not import any other module itself so the overall
CVE surface is reduced with this change.

Signed-off-by: Tariq Ibrahim <tibrahim@nvidia.com>
(cherry picked from commit be8726187)

7 of 9 new or added lines in 3 files covered. (77.78%)

5764 of 14586 relevant lines covered (39.52%)

0.45 hits per line