Fix for allowing some version that were invalid

The NewVersion function, which uses the loose parser, had the regex for
detection updated based on the official one. A change was made to allow
for versions like 1.2 and other "loose" ones (to use the node semver
term).

StrictNewVersion had some internal validation updated to catch issues.

For NewVersion, the benchmarking is now faster than the previous regex.

Ref #211

Signed-off-by: Matt Farina <matt.farina@suse.com>

Updating changelog for 3.3.0

Signed-off-by: Matt Farina <matt@mattfarina.com>

bumping min version in go.mod based on what's tested

Signed-off-by: Matt Farina <matt@mattfarina.com>

Updating the testing version of Go used

Signed-off-by: Matt Farina <matt@mattfarina.com>

simplify StrictNewVersion

Removing reference to vert

vert is not longer using a supported version of this lib.

Closes #244

Signed-off-by: Matt Farina <matt@mattfarina.com>

doc: hyphen range constraint without whitespace

add >= and <=

feat: nil version equality

updating github actions

Signed-off-by: Matt Farina <matt@mattfarina.com>

Add caching to fuzz testing

This makes fuzz testing additive to previous scans

Signed-off-by: Matt Farina <matt@mattfarina.com>

Adding go build cache to fuzz output

This is to capture the location in CI in order to cache across fuzz runs

Signed-off-by: Matt Farina <matt@mattfarina.com>

Fix spelling in README

Updating the GitHub Actions and versions of Go used

Signed-off-by: Matt Farina <matt@mattfarina.com>

Fix: bad package in README

This PR fixes the bad package name in the README file.

This changes the Equal method to return true for 2 nil values and false if any one of the values is nil. Previously passing a nil value would have resulted in a panic.

Signed-off-by: Matt Farina <matt@mattfarina.com>

Updating docs for security, fuzz, codeql, gosec

Signed-off-by: Matt Farina <matt@mattfarina.com>

Migrating Fuzz testing to Go built-in testing

This also sets up CI to regularly perform Fuzz testing.

This first step with fuzzing migrated just the existing Fuzz tests
to the new setup. In the future additional tests can be added.

Signed-off-by: Matt Farina <matt@mattfarina.com>

Updating Go for 1.20

Also updated golangci-lint to support the latest Go.

Signed-off-by: Matt Farina <matt@mattfarina.com>

Adding CodeQL scanning

Signed-off-by: Matt Farina <matt@mattfarina.com>

Fix issue with - ranges being transformed to something imparsible