Bump npm to 11.8.0

[yeikel]

What are you trying to accomplish?

Using the latest NPM release leads to compatibility issues. To avoid issues to our users, it seems that our best interest is to align it with the version included

Fixes #13931

Anything you want to highlight for special attention from reviewers?

I have submitted #14139, which I believe offers a long-term solution to this issue. Since the version of npm is constantly changing and future Node.js releases, even within the same major version, may update it, Dependabot should not be tied to this dependency.

How will you know you've accomplished your goal?

The version of npm is the same as what's included in NodeJS 24

Checklist

• I have run the complete test suite to ensure all tests and linters pass.
• I have thoroughly tested my code changes to ensure they work as expected, including adding additional tests for new functionality.
• I have written clear and descriptive commit messages.
• I have provided a detailed description of the changes in the pull request, including the problem it addresses, how it fixes the problem, and any relevant details about the implementation.
• I have ensured that the code is well-documented and easy to understand.

[yeikel]

@kbukum1 Could you please review this?

[ffried]

I don't think this is needed now that node has released 24.13.1 which includes npm 11.8.0.

[yeikel]

I don't think this is needed now that node has released 24.13.1 which includes npm 11.8.0.

Thanks for the heads up. I updated the pull request to target 11.8.0 instead as we should still try to be aligned