[BMU-2743] Upgrade jsondiffpatch - Security Vulnerability

[marcelogpinheiro]

Upgrade jsondiffpatch from 0.5.0 to 0.7.6

Bumps jsondiffpatch in packages/sync-actions from 0.5.0 to ^0.7.6 to fix security vulnerabilities in 0.5.0.

Why the config changes were needed

0.7 is ESM-only with breaking API changes, so a few adjustments were required:

• jest.config.js (root) + packages/sync-actions/jest.config.js — Jest skips node_modules by default, so the ESM package threw Cannot use import statement outside a module. Added transformIgnorePatterns: ['/node_modules/(?!(jsondiffpatch)/)'] to transpile it. The root config is the one CI uses.
• package.json (root) — bumped typescript ^4.6.2 → ^5.8.2, required by 0.7's type definitions.
• src/utils/diffpatcher.ts — new import path (jsondiffpatch); dropped textDiff.minLength (text diffing is opt-in in 0.7, and whole-value replacement is what we want); patch() now returns unknown, narrowed back to T.
• src/utils/types.ts — replaced jsondiffpatch's strict Delta type with a loose Record<string | number, any>, since builders index deltas by key and position.

Tests added in test/utils/diffpatcher.spec.ts.

[marcelogpinheiro]

I'm checking the pipeline tests...

[changeset-bot]

🦋 Changeset detected

Latest commit: cc3b3cd

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@commercetools/sync-actions	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[islam3zzat]

Thank you, could we remove the code comments that are related to this upgrade.