fix: License scanning to match new deps.dev names (#2395)

They are also looking at implementing a translation layer to keep
supporting the old version format (eta sometime next week) to make sure
existing osv-scanner queries are not broken.

Closes #2394

Author: another-rex

internal/clients/clientimpl/licensematcher/licensematcher.go

@@ -96,8 +96,14 @@ func (matcher *DepsDevLicenseMatcher) makeVersionRequest(ctx context.Context, qu
 }
 
 func versionQuery(system depsdevpb.System, name string, version string) *depsdevpb.GetVersionRequest {
-	if system == depsdevpb.System_GO && name != "stdlib" {
-		version = "v" + version
+	if system == depsdevpb.System_GO {
+		// deps.dev uses native go versioning, which includes prepending v for package versions
+		// and go for stdlib
+		if name == "stdlib" {
+			version = "go" + version
+		} else {
+			version = "v" + version
+		}
 	}
 
 	return &depsdevpb.GetVersionRequest{