From e737ffbdb8f86e909252b55e8120d2826763b520 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 15 Jan 2026 02:05:59 +0000
Subject: [PATCH] fix(deps): update dependency diff to v8 [security]

---
 pnpm-lock.yaml          | 14 ++++++++++----
 src/package.json        |  2 +-
 webview-ui/package.json |  2 +-
 3 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 177d0b3e5ab..4ac7e6594b9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -803,8 +803,8 @@ importers:
         specifier: ^6.0.0
         version: 6.0.0
       diff:
-        specifier: ^5.2.0
-        version: 5.2.0
+        specifier: ^8.0.0
+        version: 8.0.3
       diff-match-patch:
         specifier: ^1.0.5
         version: 1.0.5
@@ -1167,8 +1167,8 @@ importers:
         specifier: ^2.1.1
         version: 2.2.0
       diff:
-        specifier: ^5.2.0
-        version: 5.2.0
+        specifier: ^8.0.0
+        version: 8.0.3
       fast-deep-equal:
         specifier: ^3.1.3
         version: 3.1.3
@@ -5678,6 +5678,10 @@ packages:
     resolution: {integrity: sha512-uIFDxqpRZGZ6ThOk84hEfqWoHx2devRFvpTZcTHur85vImfaxUbTW9Ryh4CpCuDnToOP1CEtXKIgytHBPVff5A==}
     engines: {node: '>=0.3.1'}
 
+  diff@8.0.3:
+    resolution: {integrity: sha512-qejHi7bcSD4hQAZE0tNAawRK1ZtafHDmMTMkrrIGgSLl7hTnQHmKCeB45xAcbfTqK2zowkM3j3bHt/4b/ARbYQ==}
+    engines: {node: '>=0.3.1'}
+
   dijkstrajs@1.0.3:
     resolution: {integrity: sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==}
 
@@ -15761,6 +15765,8 @@ snapshots:
 
   diff@5.2.0: {}
 
+  diff@8.0.3: {}
+
   dijkstrajs@1.0.3: {}
 
   dingbat-to-unicode@1.0.1: {}
diff --git a/src/package.json b/src/package.json
index 7abc54cc8aa..b69aaaa204c 100644
--- a/src/package.json
+++ b/src/package.json
@@ -471,7 +471,7 @@
 		"clone-deep": "^4.0.1",
 		"default-shell": "^2.2.0",
 		"delay": "^6.0.0",
-		"diff": "^5.2.0",
+		"diff": "^8.0.0",
 		"diff-match-patch": "^1.0.5",
 		"exceljs": "^4.4.0",
 		"fast-deep-equal": "^3.1.3",
diff --git a/webview-ui/package.json b/webview-ui/package.json
index a316861389b..7ab67d9aec9 100644
--- a/webview-ui/package.json
+++ b/webview-ui/package.json
@@ -41,7 +41,7 @@
 		"cmdk": "^1.0.0",
 		"date-fns": "^4.1.0",
 		"debounce": "^2.1.1",
-		"diff": "^5.2.0",
+		"diff": "^8.0.0",
 		"fast-deep-equal": "^3.1.3",
 		"fzf": "^0.5.2",
 		"hast-util-to-jsx-runtime": "^2.3.6",