Problem/Motivation

diff is currently pinned to 1.10

diff 1.10 has a security advisory SA-CONTRIB-2026-096

diff 2.1.1 should be the new minimum.

There's also vastly improved functionality in the latest diff module (supports all revisionable entity types such as content blocks).

Steps to reproduce

composer audit

Proposed resolution

modify drupalwxt composer.json diff version , pin to ^2.1

drop all diff patches, not needed with diff 2.1.1

Remaining tasks

Make it so

User interface changes

Support for all revisionable entity types

API changes

Some internally yes, but should not affect other modules.

Data model changes

N/A

Comments

joseph.olstad created an issue. See original summary.

joseph.olstad’s picture

Issue summary: View changes
joseph.olstad’s picture

Assigning to smulvih2 , please do not upload a patch or merge request for this, it's not necessary (a one line change) and removing the diff patches.

joseph.olstad’s picture

Issue summary: View changes

Updating issue summary:
drop all diff patches and upgrade to ^2.1 instead of pinning to 1.10

the patches are no longer necessary, all issues have been fixed with new diff with vastly improved functionality.

liam morland’s picture

Title: security advisory update for the diff module » Security: Update to diff 2
Version: 6.3.0 » 6.3.x-dev
Category: Bug report » Task
Issue tags: +Security improvements
liam morland’s picture

Status: Needs review » Closed (duplicate)
Related issues: +#3580939: Security: Update to diff 2.1

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.