chore: bump cyclonedx-npm package for npm10 support

[setchy]

Description

Update @cyclonedx/cyclonedx-npm package so remove npm engine warning

Addressed Issue

When building with npm10, the following warning is displayed

npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@cyclonedx/[email protected]',
npm WARN EBADENGINE   required: { node: '>=14', npm: '6 - 9' },
npm WARN EBADENGINE   current: { node: 'v20.11.1', npm: '10.4.0' }
npm WARN EBADENGINE }

Additional Details

Checklist

• I have read and understand the contributing guidelines
• This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

[setchy]

I couldn't see an existing Dependabot PR covering this 🤷

[nscuro]

Thanks!

Not sure what's up with Dependabot, just recently I had to bump loads of dependencies by hand in the Java code base... DependencyTrack/dependency-track#3487

[setchy]

Thanks!

Not sure what's up with Dependabot, just recently I had to bump loads of dependencies by hand in the Java code base... DependencyTrack/dependency-track#3487

Unfortunately, that's consistent with my experience using Dependabot. It seems to be too passive and refrains from raising PR. It also lacks transparency over what is pending.

I'm far more familiar with Renovate Bot and find it way more intuitive to use, particularly it's Dependency Dashboard feature.