[6.0] NPM audit fix low severity security vulnerability by updating diff from 8.0.2 to 8.0.3#46713
Merged
Bodge-IT merged 2 commits intojoomla:6.0-devfrom Jan 20, 2026
Merged
Conversation
Contributor
|
I have tested this item ✅ successfully on 25a59c1 This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46713. |
Contributor
|
I have tested this item ✅ successfully on 25a59c1
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46713. |
Contributor
|
RTC This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/46713. |
Contributor
|
Thanks @richard67 for the fix and @brianteeman & @muhme for testing |
This was referenced Jan 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Pull Request for Issue # .
Summary of Changes
This pull request (PR) fixes one low severity security vulnerability in NPM dependencies reported by
npm auditby usingnpm audit fix.@Bodge-IT @softforge @muhme In opposite to my previous PRs of this kind there is no corresponding PR in the 5.4-dev branch this time because in 5.4-dev it would mean a major update of the "diff dependency".
@HLeithner @tecpromotion In 6.1-dev the changes from this PR here have already been made with the last NPM dependency update, so simply ignore the changes when doing your upmerge after this PR here has been merged into 6.0-dev.
Testing Instructions
It needs a development environment with a git clone, composer and npm.
composer installandnpm ci.npm audit.Actual result BEFORE applying this Pull Request
Expected result AFTER applying this Pull Request
Link to documentations
Please select:
Documentation link for docs.joomla.org:
No documentation changes for docs.joomla.org needed
Pull Request link for manual.joomla.org:
No documentation changes for manual.joomla.org needed