Dependency mismatch: cloudevents version differs between repo (^9.0.0) and published package (^8.0.2)

Hi team,

I noticed a version mismatch in the @google-cloud/functions-framework@4.0.0 package.
The package.json in the repository lists the cloudevents dependency as ^9.0.0,
but the version published to npm appears to depend on ^8.0.2.

Start by comparing the repository's package.json with the published @google-cloud/functions-framework@4.0.0 package metadata, focusing on the cloudevents dependency. Confirm which version is intended and verify that the repository and published package declare the same range when the issue is resolved.

Written by the indexing model from the issue text.