Conversation
Bumps [consola](https://github.com/unjs/consola) from 2.15.3 to 3.4.2. - [Release notes](https://github.com/unjs/consola/releases) - [Changelog](https://github.com/unjs/consola/blob/main/CHANGELOG.md) - [Commits](unjs/consola@v2.15.3...v3.4.2) --- updated-dependencies: - dependency-name: consola dependency-version: 3.4.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Season’s greetings! 👋 We’d like to thank everyone for another year of fruitful collaborations, engaging discussions, and for the continued support of our work. Learning Equality will be on holidays from December 22 to January 5. We look forward to much more in the new year and wish you a very happy holiday season! Are you preparing for Google Summer of Code? See our GSoC guidelines. |
|
👋 Thanks for contributing! We will assign a reviewer within the next two weeks. In the meantime, please ensure that:
We'll be in touch! 😊 |
rtibblesbot
left a comment
rtibblesbot
left a comment
There was a problem hiding this comment.
Dependency Update Review
Package: consola 2.15.3 → 3.4.2
Semver risk: Major (v2 → v3)
Dependency type: devDependency
CI status: Failing — lint errors, Netlify deploy failure
Changelog Analysis
Sources consulted:
Breaking changes (v3):
- Named exports are now recommended:
const { consola } = require("consola")instead ofconst consola = require("consola") - Removed
jsonandwinstonreporters - Type changes:
LogTypeLiteralandlogtypemerged toLogType - Switched from
chalktocolorette, removeddayjsdependency - Full TypeScript rewrite with ESM-first distribution
Security fixes: None noted.
Compatibility Assessment
- Project uses affected APIs: The project uses
require('consola')as a default import in 5 utility scripts. Consola v3 claims backward compatibility for the main interface, but the default export path has changed. - Lint breakage: Consola v3's dist files use modern JS syntax (numeric separators) that the project's ESLint parser (
vue-eslint-parser) cannot parse. This causeseslint-plugin-importto fail when resolving consola imports inDocsPageSection.vueandDocsPageTemplate/index.vue. This is the root cause of the CI lint failures. - Code changes required: Yes — at minimum, the ESLint configuration needs updating to handle consola v3's modern syntax (e.g., parser upgrade or ignoring consola in import resolution). The
require('consola')calls may also need migration to destructured imports. - Netlify deploy failure: Cascading from the lint failure. Lint passes on recent merged PRs (#1209), confirming this is caused by the consola upgrade.
Recommendation
REQUEST_CHANGES — This major version bump causes lint CI failures due to consola v3's ESM-first distribution using modern JS syntax that the project's ESLint parser cannot handle. The PR needs code changes (ESLint config and/or parser upgrade) to accompany the dependency bump. A bare dependency update is insufficient for this major version jump.
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Reviewed the pull request diff checking for:
- Correctness: bugs, edge cases, undocumented behavior, resource leaks, hardcoded values
- Design: unnecessary complexity, naming, readability, comment accuracy, redundant state
- Architecture: duplicated concerns, minimal interfaces, composition over inheritance
- Testing: behavior-based assertions, mocks only at hard boundaries, accurate coverage
- Completeness: missing dependencies, unupdated usages, i18n, accessibility, security
- Principles: DRY (same reason to change), SRP, Rule of Three (no premature abstraction)
- Checked CI status and linked issue acceptance criteria
- For UI changes: inspected screenshots for layout, visual completeness, and consistency
| "chokidar-cli": "^3.0.0", | ||
| "concurrently": "^9.1.0", | ||
| "consola": "^2.15.3", | ||
| "consola": "^3.4.2", |
There was a problem hiding this comment.
blocking: This major version bump (v2 → v3) breaks CI. Consola v3's dist files use modern JS syntax (numeric separators) that the project's vue-eslint-parser cannot parse, causing eslint-plugin-import failures in DocsPageSection.vue and DocsPageTemplate/index.vue:
Parse errors in imported module 'consola': Identifier directly after number (461:22) import/namespace
This dependency-only PR needs accompanying changes — either an ESLint parser/config update to handle modern syntax in dependencies, or an upgrade to a version of eslint-plugin-import that tolerates it. Additionally, the 5 utility scripts using require('consola') as a default import may need migration to const { consola } = require('consola') per the v3 migration guide.
1 participant
Bumps consola from 2.15.3 to 3.4.2.
Release notes
Sourced from consola's releases.
... (truncated)
Changelog
Sourced from consola's changelog.
... (truncated)
Commits
2cfcfc0chore(release): v3.4.271df563fix: calculate box width with the title width (#362)7b82f84fix: export tree utils (#349)1e5f846chore: update deps6bfa84cchore: cleanup unused deps (#361)946566cchore(release): v3.4.125911bffix: remove all message lines from stack (#356)da26f10chore: update deps84ee846chore: update ci (#353)dbc239cchore(deps): update all non-major dependencies (#340)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)