Skip to content

Bump streamqueue from 1.1.2 to 2.0.0#1081

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/streamqueue-2.0.0
Open

Bump streamqueue from 1.1.2 to 2.0.0#1081
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/streamqueue-2.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026

Bumps streamqueue from 1.1.2 to 2.0.0.

Changelog

Sourced from streamqueue's changelog.

2.0.0 (2024-07-18)

Bug Fixes

  • docs: fix markdown title (984bdee)

Code Refactoring

  • core: complete refactoring (a969877)

BREAKING CHANGES

  • core: Support only Node20+, use ESM, API surface changed. By updating assume you could have a lot of work to do.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 28, 2026
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented Apr 28, 2026

Greptile Summary

This PR bumps streamqueue from 1.1.2 to 2.0.0, a major version whose changelog explicitly states it now requires Node 20+ and is ESM-only with an API surface change. The gulpfile.js still uses require('streamqueue') (CommonJS), which will throw ERR_REQUIRE_ESM and break the prod_minify_js / prod build tasks without any companion migration work.

Confidence Score: 2/5

Not safe to merge — the ESM-only v2.0.0 library will break the existing CommonJS require call and crash the production build pipeline

streamqueue 2.0.0 is ESM-only; gulpfile.js uses CJS require('streamqueue'), which will throw ERR_REQUIRE_ESM at runtime. No migration of the call site or gulpfile module format was included, leaving the prod build broken.

gulpfile.js — the require('streamqueue') call and surrounding task must be migrated to ESM or the project must stay on v1.x

Important Files Changed

Filename Overview
package.json Bumps streamqueue to v2.0.0, which is an ESM-only, Node 20+ major version with API-breaking changes; the consuming gulpfile.js uses CJS require and has not been updated
package-lock.json Lock file correctly reflects the v2.0.0 resolution with new yerror dependency and updated Node engine requirement (>=20.11.1)

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["gulp prod task"] --> B["prod_minify_js task"]
    B --> C["require('streamqueue') v2.0.0\n(ESM-only)"]
    C --> D{"CJS require\ncompatible?"}
    D -- "No (ERR_REQUIRE_ESM)" --> E["Build FAILS ❌"]
    D -- "Yes (v1.x)" --> F["streamqueue({ objectMode: true }, ...streams)"]
    F --> G["concat → uglify → dest"]
Loading

Comments Outside Diff (1)

  1. gulpfile.js, line 21 (link)

    P1 Breaking: CJS require incompatible with ESM-only v2.0.0

    streamqueue 2.0.0 switched to ESM-only distribution (the changelog explicitly lists "use ESM, API surface changed" as a breaking change). A CommonJS require('streamqueue') call as used here will throw ERR_REQUIRE_ESM at runtime, meaning the prod_minify_js gulp task (and the entire prod build pipeline) will fail immediately after this upgrade.

Reviews (1): Last reviewed commit: "Bump streamqueue from 1.1.2 to 2.0.0" | Re-trigger Greptile

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/streamqueue-2.0.0 branch from 348a4c0 to e2468c0 Compare April 28, 2026 17:29
Bumps [streamqueue](https://github.com/nfroidure/StreamQueue) from 1.1.2 to 2.0.0.
- [Changelog](https://github.com/nfroidure/streamqueue/blob/main/CHANGELOG.md)
- [Commits](nfroidure/streamqueue@v1.1.2...v2.0.0)

---
updated-dependencies:
- dependency-name: streamqueue
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/streamqueue-2.0.0 branch from e2468c0 to 6ca36a3 Compare April 28, 2026 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants