From fbbe4bd7eb0073edf8b6aeca38e1c48b113bac3e Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Tue, 21 Apr 2026 07:42:04 +0000
Subject: [PATCH] fix(deps): bump ts-node's diff to 4.0.4 via scoped resolution

Addresses GHSA-73rr-hh4g-fpgx (low) on the ts-node > diff path.
ts-node 10.9.2 declares diff "^4.0.1", so forcing 4.0.4 via a
scoped resolution stays within the declared range and pulls in
the patched release.

yarn audit: ts-node advisory resolved (4 remaining on mocha tree,
to be fixed separately). All 71 tests pass on Node 18/20/22.

https://claude.ai/code/session_01HNyci45nMAfRz3baECYtmV
---
 package.json | 3 +++
 yarn.lock    | 8 ++++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/package.json b/package.json
index 0375688..8f20ccd 100644
--- a/package.json
+++ b/package.json
@@ -31,6 +31,9 @@
     "ts-node": "10.9.2",
     "typescript": "5.9.3"
   },
+  "resolutions": {
+    "ts-node/diff": "^4.0.4"
+  },
   "files": [
     "dist",
     "src",
diff --git a/yarn.lock b/yarn.lock
index c0c2ea0..7683227 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -202,10 +202,10 @@ decamelize@^4.0.0:
   resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-4.0.0.tgz#aa472d7bf660eb15f3494efd531cab7f2a709837"
   integrity sha512-9iE1PgSik9HeIIw2JO94IidnE3eBoQrFJ3w7sFuzSX4DpmZ3v5sZpUiV5Swcf6mQEF+Y0ru8Neo+p+nyh2J+hQ==
 
-diff@^4.0.1:
-  version "4.0.2"
-  resolved "https://registry.yarnpkg.com/diff/-/diff-4.0.2.tgz#60f3aecb89d5fae520c11aa19efc2bb982aade7d"
-  integrity sha512-58lmxKSA4BNyLz+HHMUzlOEpg09FV+ev6ZMe3vJihgdxzgcwZ8VoEEPmALCZG9LmqfVoNMMKpttIYTVG6uDY7A==
+diff@^4.0.1, diff@^4.0.4:
+  version "4.0.4"
+  resolved "https://registry.yarnpkg.com/diff/-/diff-4.0.4.tgz#7a6dbfda325f25f07517e9b518f897c08332e07d"
+  integrity sha512-X07nttJQkwkfKfvTPG/KSnE2OMdcUCao6+eXF3wmnIQRn2aPAHH3VxDbDOdegkd6JbPsXqShpvEOHfAT+nCNwQ==
 
 diff@^7.0.0:
   version "7.0.0"