From 0ec373c6b52ef81a27c68d333239c1fd60650062 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sun, 25 Jan 2026 08:28:13 +0000
Subject: [PATCH] fix: workspaces/libnpmdiff/package.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-15038581
- https://snyk.io/vuln/SNYK-JS-DIFF-14917201
---
 workspaces/libnpmdiff/package.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/workspaces/libnpmdiff/package.json b/workspaces/libnpmdiff/package.json
index fbfc1eaf9c0a2..ad7b963da84f5 100644
--- a/workspaces/libnpmdiff/package.json
+++ b/workspaces/libnpmdiff/package.json
@@ -51,11 +51,11 @@
     "@npmcli/disparity-colors": "^1.0.1",
     "@npmcli/installed-package-contents": "^1.0.7",
     "binary-extensions": "^2.2.0",
-    "diff": "^5.0.0",
+    "diff": "^8.0.3",
     "minimatch": "^3.0.4",
     "npm-package-arg": "^9.0.0",
-    "pacote": "^13.0.2",
-    "tar": "^6.1.0"
+    "pacote": "^21.0.1",
+    "tar": "^7.5.4"
   },
   "templateOSS": {
     "version": "2.4.3"