[Security] Bump diff from 1.4.0 to 4.0.2

Bumps [diff](https://github.com/kpdecker/jsdiff) from 1.4.0 to 4.0.2. **This update includes a security fix.**
- [Release notes](https://github.com/kpdecker/jsdiff/releases)
- [Changelog](https://github.com/kpdecker/jsdiff/blob/master/release-notes.md)
- [Commits](kpdecker/jsdiff@v1.4.0...v4.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>