Update bazel-diff from 4.5 to 8.1.1... (#2088)

...and invoke it with --excludeExternalTargets so that it works properly
in the presence of --noenable_workspace.
diff --git a/buildkite/bazelci.py b/buildkite/bazelci.py
index d24f4c9..3a56806 100755
--- a/buildkite/bazelci.py
+++ b/buildkite/bazelci.py
@@ -588,7 +588,7 @@
 
 # TODO(fweikert): Install bazel-diff on the Docker images and on the Mac machines
 BAZEL_DIFF_URL = (
-    "https://github.com/Tinder/bazel-diff/releases/download/4.5.0/bazel-diff_deploy.jar"
+    "https://github.com/Tinder/bazel-diff/releases/download/8.1.1/bazel-diff_deploy.jar"
 )
 
 AUTO_DIFFBASE_VALUES = frozenset(["1", "true", "auto"])
@@ -2579,6 +2579,7 @@
                     "-jar",
                     bazel_diff_path,
                     "generate-hashes",
+                    "--excludeExternalTargets",
                     "-w",
                     repo_dir,
                     "-b",