semver: loosen semver compare()
mask: use <token> instead of {{token}}
Release 3.0.3