chore(deps): bump the spdx group with 1 update (#993)

* chore(deps): bump the spdx group with 1 update

Bumps the spdx group with 1 update: [spdx-expression-parse](https://github.com/jslicense/spdx-expression-parse.js).

- [Commits](jslicense/spdx-expression-parse.js@v3.0.1...v4.0.0)

---
updated-dependencies:
- dependency-name: spdx-expression-parse
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: spdx
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update package.json

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>

* Update HISTORY.md

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jan Kowalleck <jan.kowalleck@gmail.com>

Author: dependabot[bot]

HISTORY.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 ## unreleased
 
+* Misc
+  * Widened dependency `spdx-expression-parse@^3.0.1||^4`, was `@^3.0.1` (via [#993])
+ 
+[#993]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/993
+
 ## 6.1.1 -- 2023-12-01
 
 Maintenance release.

package.json

@@ -67,7 +67,7 @@
   },
   "dependencies": {
     "packageurl-js": ">=0.0.6 <0.0.8 || ^1",
-    "spdx-expression-parse": "^3.0.1"
+    "spdx-expression-parse": "^3.0.1 || ^4"
   },
   "optionalDependencies": {
     "ajv": "^8.12.0",