Security: diff dependency vulnerable to DoS (GHSA-73rr-hh4g-fpgx)

[jashan777]

Description

Hi,
I noticed that uvu depends on the diff package with the version range: "diff": "^5.0.0"
A recent GitHub Security Advisory reports a Denial of Service vulnerability in diff < 8.0.3
GHSA-73rr-hh4g-fpgx
the above issue is now being flagged by npm audit and other dependency security scanners for projects that depend on uvu.

[qwertychouskie]

Can confirm this also shows up for us.

[jashandeep-toddleapp]

@lukeed Hi! Thanks for the work on uvu — any chance there’s a fix planned for this issue?