chore(deps): update dependency @npmcli/promise-spawn to v9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@npmcli/promise-spawn	8.0.3 -> 9.0.1

---

Release Notes

npm/promise-spawn (@​npmcli/promise-spawn)

v9.0.1

Compare Source

Dependencies

• 8118181 #​148 bump which from 5.0.0 to 6.0.0 (#​148) (@​dependabot[bot])

Chores

• 9a474fe #​146 bump @​npmcli/eslint-config from 5.1.0 to 6.0.0 (#​146) (@​dependabot[bot])
• 70cf3ad #​147 bump @​npmcli/template-oss from 4.27.1 to 4.28.0 (#​147) (@​dependabot[bot], @​npm-cli-bot)

v9.0.0

Compare Source

⚠️ BREAKING CHANGES

• @npmcli/promise-spawn now supports node ^20.17.0 || >=22.9.0

Bug Fixes

• 83b6f8e #​144 align to npm 11 node engine range (@​owlstronaut)

Chores

• cb2d875 #​144 remove unneeded eslint ignore (@​owlstronaut)
• 17d2584 #​144 template-oss-apply (@​owlstronaut)
• 078277b #​143 bump @​npmcli/template-oss from 4.27.0 to 4.27.1 (#​143) (@​dependabot[bot], @​npm-cli-bot)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Output of pnpm why @npmcli/promise-spawn:

Legend: production dependency, optional only, dev only

@cyclonedx/[email protected] /home/runner/work/cdxgen/cdxgen

dependencies:
@npmcli/map-workspaces 5.0.1
└─┬ @npmcli/package-json 7.0.2
  └─┬ @npmcli/git 7.0.0
    └── @npmcli/promise-spawn 9.0.1
@npmcli/package-json 7.0.2
└─┬ @npmcli/git 7.0.0
  └── @npmcli/promise-spawn 9.0.1

Output of jq on components:

{
  "group": "@npmcli",
  "name": "promise-spawn",
  "version": "9.0.1",
  "description": "spawn processes the way the npm cli likes to do",
  "scope": "optional",
  "hashes": [
    {
      "alg": "SHA-512",
      "content": "38b51aa2a06ecb1793a94be30371591625d47d80b56a5a7749af7d816dc4503cf7b59dc26d70dd719eea58a07389cac995e220b9ca166a6587d6c680987fe5d9"
    }
  ],
  "licenses": [
    {
      "license": {
        "id": "ISC",
        "url": "https://opensource.org/licenses/ISC"
      }
    }
  ],
  "purl": "pkg:npm/%40npmcli/[email protected]",
  "externalReferences": [
    {
      "type": "vcs",
      "url": "https://github.com/npm/promise-spawn#readme"
    },
    {
      "type": "vcs",
      "url": "git+https://github.com/npm/promise-spawn.git"
    }
  ],
  "type": "library",
  "bom-ref": "pkg:npm/@npmcli/[email protected]",
  "properties": [
    {
      "name": "SrcFile",
      "value": "pnpm-lock.yaml"
    }
  ],
  "evidence": {
    "identity": [
      {
        "field": "purl",
        "confidence": 1,
        "methods": [
          {
            "technique": "manifest-analysis",
            "confidence": 1,
            "value": "pnpm-lock.yaml"
          }
        ],
        "concludedValue": "pnpm-lock.yaml"
      }
    ]
  },
  "tags": [
    "cli"
  ]
}

Output of jq on dependencies:

{
  "ref": "pkg:npm/@npmcli/[email protected]",
  "dependsOn": [
    "pkg:npm/[email protected]"
  ]
}
{
  "ref": "pkg:npm/@npmcli/[email protected]",
  "dependsOn": [
    "pkg:npm/@npmcli/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]",
    "pkg:npm/[email protected]"
  ]
}