deps(create-catalyst): replace chalk with consola colorize utility function

[matthewvolk]

What/Why?

Removes chalk dependency in favor of consola "colorize" utility function (which only depends on node:tty)

Testing

Text is still colorized appropriately:

Migration

N/A

Closes #2592

[changeset-bot]

🦋 Changeset detected

Latest commit: 78def1b

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@bigcommerce/create-catalyst	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
catalyst-b2b	Ready	Preview	Comment	Sep 8, 2025 6:02pm
catalyst-canary	Ready	Preview	Comment	Sep 8, 2025 6:02pm

3 Skipped Deployments

Project	Deployment	Preview	Comments	Updated (UTC)
catalyst	Ignored			Sep 8, 2025 6:02pm
catalyst-au	Ignored			Sep 8, 2025 6:02pm
catalyst-uk	Ignored			Sep 8, 2025 6:02pm

[jorgemoya]

Is there a particular reason for this?

[adamdyche]

Is there a particular reason for this?

https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised

[chanceaclark]

The only thing that would be affected is the github actions, which doesn’t affect any users. That compromised version is already removed off of npm registries so we don’t need to worry about it being installed.

[matthewvolk]

I opted to just completely remove chalk in the latest commit, and replace it with what we're now using in the @bigcommerce/catalyst CLI, which is the colorize utility from consola: https://github.com/unjs/consola/blob/main/src/utils/color.ts

[jorgemoya]

Nice!