feat!: drop support for npm<9

.github/workflows/nodejs.yml

@@ -163,9 +163,6 @@ jobs:
           - npm-version: '^9'
             ## "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
             node-version: '^20.18'
-          - npm-version: '^8'
-            ## "node": "^12.13.0 || ^14.15.0 || >=16"
-            # node-version: '^16' ## cannot pin due to https://github.com/npm/cli/issues/6743
     env:
       npm_config_engine_strict: true
     timeout-minutes: 10

.github/workflows/npm-ls_demo-results.yml

@@ -34,8 +34,7 @@ jobs:
           ## see also: https://github.com/npm/cli/releases
           - '11'     # Current
           - '10'
-          - '9'
-          - '8'      # Lowest supported
+          - '9'      # Lowest supported
         node-version:
           ## action based on https://github.com/actions/node-versions/releases
           ## see also: https://nodejs.org/en/about/releases/

HISTORY.md

@@ -9,11 +9,12 @@ All notable changes to this project will be documented in this file.
 
 * BREAKING Changes
   * Dropped support for `node<20.18.0` ([#1192] via [#1273])
-  * Dropped support for `npm<8` ([#1274] via [#1273])
+  * Dropped support for `npm<9` ([#1274] via [#1273], [#1277])
 
 [#1192]: https://github.com/CycloneDX/cyclonedx-node-npm/issues/1192
 [#1273]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1273
 [#1274]: https://github.com/CycloneDX/cyclonedx-node-npm/issues/1274
+[#1277]: https://github.com/CycloneDX/cyclonedx-node-npm/pull/1277
 
 ## 2.1.0 - 2025-03-19
 

README.md

@@ -25,7 +25,7 @@ and might have properties following [`cdx:npm` Namespace Taxonomy](https://githu
 ## Requirements
 
 * `node >= 20.18.0`
-* `npm >= 8.7`
+* `npm >= 9`
 
 However, there are older versions of this tool that support
 * Node.js v14 or later

package.json

@@ -93,7 +93,7 @@
   "type": "commonjs",
   "engines": {
     "node": ">=20.18.0",
-    "npm": ">=8.7"
+    "npm": ">=9"
   },
   "directories": {
     "doc": "docs",

src/cli.ts

@@ -242,7 +242,7 @@ const ExitCode: Readonly<Record<string, number>> = Object.freeze({
   INVALID: 2
 })
 
-const npmMinVersion = [8, 7]
+const npmMinVersion = [9, 0, 0]
 
 export async function run (process: NodeJS.Process): Promise<number> {
   process.title = 'cyclonedx-node-npm'