Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 30, 2026

Bumps diff to 5.2.2 and updates ancestor dependency @wdio/mocha-framework. These dependencies need to be updated together.

Updates diff from 3.5.0 to 5.2.2

Changelog

Sourced from diff's changelog.

v5.2.2 - January 2026

Only change from 5.2.0 is a backport of the fix to GHSA-73rr-hh4g-fpgx.

v5.2.1 (deprecated)

Accidental release - do not use.

v5.2.0

Commits

  • #411 Big performance improvement. Previously an O(n) array-copying operation inside the innermost loop of jsdiff's base diffing code increased the overall worst-case time complexity of computing a diff from O(n²) to O(n³). This is now fixed, bringing the worst-case time complexity down to what it theoretically should be for a Myers diff implementation.
  • #448 Performance improvement. Diagonals whose furthest-reaching D-path would go off the edge of the edit graph are now skipped, rather than being pointlessly considered as called for by the original Myers diff algorithm. This dramatically speeds up computing diffs where the new text just appends or truncates content at the end of the old text.
  • #351 Importing from the lib folder - e.g. require("diff/lib/diff/word.js") - will work again now. This had been broken for users on the latest version of Node since Node 17.5.0, which changed how Node interprets the exports property in jsdiff's package.json file.
  • #344 diffLines, createTwoFilesPatch, and other patch-creation methods now take an optional stripTrailingCr: true option which causes Windows-style \r\n line endings to be replaced with Unix-style \n line endings before calculating the diff, just like GNU diff's --strip-trailing-cr flag.
  • #451 Added diff.formatPatch.
  • #450 Added diff.reversePatch.
  • #478 Added timeout option.

v5.1.0

  • #365 Allow early termination to limit execution time with degenerate cases

Commits

v5.0.0

  • Breaking: UMD export renamed from JsDiff to Diff.
  • Breaking: Newlines separated into separate tokens for word diff.
  • Breaking: Unified diffs now match "quirks"

Commits

v4.0.4 - January 2026

Only change from 4.0.2 is a backport of the fix to GHSA-73rr-hh4g-fpgx.

v4.0.3 (deprecated)

Accidental release - do not use.

v4.0.2

No meaningful changes from v4.0.1 - just removed some cruft that shouldn't've been published.

v4.0.1 - January 6th, 2019

  • Fix main reference path - b826104

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by explodingcabbage, a new releaser for diff since your current version.


Updates @wdio/mocha-framework from 5.23.0 to 9.23.2

Release notes

Sourced from @​wdio/mocha-framework's releases.

v9.23.2

No updates!

v9.23.1 (2026-01-18)

👓 Spec Compliancy

  • wdio-protocols

🚀 New Feature

🐛 Bug Fix

  • wdio-browser-runner
    • #15010 fix(wdio-browser-runner): prioritize @​tailwindcss/postcss for Tailwin… (@​mccmrunal)
  • wdio-cli
    • #15012 fix(wdio-cli): ensure dynamic specs added in onPrepare are correctly … (@​mccmrunal)
  • wdio-allure-reporter, wdio-jasmine-framework
  • webdriver
    • #14951 fix(webdriver): normalize overlapping W3C capabilities (webdriverio#14946) (@​mccmrunal)
  • wdio-utils
  • wdio-local-runner
  • wdio-jasmine-framework, wdio-sauce-service
  • webdriverio
  • wdio-cli, wdio-local-runner, wdio-runner, wdio-types
    • #14859 fix: Allow specFileRetries to be overriden in the beforeSession hook (@​bgrozev)
  • wdio-cli, webdriverio
  • wdio-appium-service
  • wdio-junit-reporter
    • #14965 fix(junit-reporter): do not report skipped test when no tests are exe… (@​mccmrunal)
  • wdio-shared-store-service
  • wdio-mocha-framework
  • wdio-browserstack-service

📝 Documentation

... (truncated)

Changelog

Sourced from @​wdio/mocha-framework's changelog.

Changelog

Tags:

  • 💥 [Breaking Change]
  • 👓 [Spec Compliancy]
  • 🚀 [New Feature]
  • 🐛 [Bug Fix]
  • 📝 [Documentation]
  • 🏠 [Internal]
  • 💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

See CHANGELOG - v4.

See CHANGELOG - v5.

See CHANGELOG - v6

See CHANGELOG - v7

See CHANGELOG - v8


v9.23.1 (2026-01-18)

👓 Spec Compliancy

  • wdio-protocols

🚀 New Feature

🐛 Bug Fix

  • wdio-browser-runner
    • #15010 fix(wdio-browser-runner): prioritize @​tailwindcss/postcss for Tailwin… (@​mccmrunal)
  • wdio-cli
    • #15012 fix(wdio-cli): ensure dynamic specs added in onPrepare are correctly … (@​mccmrunal)
  • wdio-allure-reporter, wdio-jasmine-framework
  • webdriver
    • #14951 fix(webdriver): normalize overlapping W3C capabilities (webdriverio#14946) (@​mccmrunal)
  • wdio-utils
  • wdio-local-runner
  • wdio-jasmine-framework, wdio-sauce-service

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​wdio/mocha-framework since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [diff](https://github.com/kpdecker/jsdiff) to 5.2.2 and updates ancestor dependency [@wdio/mocha-framework](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-mocha-framework). These dependencies need to be updated together.


Updates `diff` from 3.5.0 to 5.2.2
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v3.5.0...v5.2.2)

Updates `@wdio/mocha-framework` from 5.23.0 to 9.23.2
- [Release notes](https://github.com/webdriverio/webdriverio/releases)
- [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webdriverio/webdriverio/commits/v9.23.2/packages/wdio-mocha-framework)

---
updated-dependencies:
- dependency-name: diff
  dependency-version: 5.2.2
  dependency-type: indirect
- dependency-name: "@wdio/mocha-framework"
  dependency-version: 9.23.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 30, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 30, 2026 14:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants