Fixes dependency vulnerabilities

[ony3000]

This PR closes #45.

[Copilot]

Pull request overview

This PR claims to address a security vulnerability (CVE-2026-24001) in the diff package by upgrading from version 5.1.0 to 5.2.2. However, there are critical concerns with the CVE reference and contradictions with the linked issue that need to be resolved before merging.

Changes:

• Upgraded diff dependency from 5.1.0 to 5.2.2
• Updated corresponding TypeScript types @types/diff from 5.0.3 to 5.2.3
• Updated pnpm-lock.yaml with new dependency versions

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates diff to 5.2.2 and @types/diff to 5.2.3
pnpm-lock.yaml	Updates lock file entries for diff and its types to match package.json changes

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.