Use lenient semantic version comparator for JVM package repos
Created by: olafurpg
Previously, we used an external Go package to compare semantic versions.
This package occasionally panicked on versions like 1.2.3.Final
, which
are valid Java package versions. Now, we compare the versions using a
custom comparator that never panics.