chore(deps): update hotdata requirement from <0.10,>=0.9.0 to >=0.9.0,<0.11

[dependabot]

Updates the requirements on hotdata to permit the latest version.

Release notes

Sourced from hotdata's releases.

hotdata 0.10.0

Removed

• Breaking: the API-token → JWT key exchange is deprecated and removed. The client no longer POSTs your token to /v1/auth/jwt, caches the minted JWT, or refreshes it with a refresh_token grant — the API token configured as api_key is sent verbatim as Authorization: Bearer <token>. The internal hotdata._auth module (and its TokenExchangeError) is gone, api_key is a plain attribute rather than a minting property, and the HOTDATA_DISABLE_JWT_EXCHANGE escape hatch no longer does anything (it is safe to unset). Callers passing an API token need no change; callers that were passing a pre-minted JWT can keep doing so, since it is now forwarded as the bearer credential like any other token.

Changelog

Sourced from hotdata's changelog.

[0.10.0] - 2026-08-18

Removed

• Breaking: the API-token → JWT key exchange is deprecated and removed. The client no longer POSTs your token to /v1/auth/jwt, caches the minted JWT, or refreshes it with a refresh_token grant — the API token configured as api_key is sent verbatim as Authorization: Bearer <token>. The internal hotdata._auth module (and its TokenExchangeError) is gone, api_key is a plain attribute rather than a minting property, and the HOTDATA_DISABLE_JWT_EXCHANGE escape hatch no longer does anything (it is safe to unset). Callers passing an API token need no change; callers that were passing a pre-minted JWT can keep doing so, since it is now forwarded as the bearer credential like any other token.

[0.9.1] - 2026-08-18

Fixed

• fix(auth): take a token's expiry from its own exp claim, and retry once on a 401

Changed

• chore: add request/response examples and update documentation
• feat(loads): add idempotency_key to load requests
• feat(loads): support inline csv data in table load requests
• feat(databases): add bulk operations and count endpoint

[0.9.0] - 2026-08-11

Changed

• feat(information-schema): TableInfo now reports the table's declared storage layout via partition_by and sorted_by, so a caller can read back the layout a table was created with — it is fixed at creation and cannot be altered, so reading it is the only way to confirm what was actually applied. Both fields are required: code that constructs TableInfo directly (test mocks, fixtures) must now supply them, while code that only reads responses is unaffected. Note the existing feat(tables): add partition_by and sorted_by configuration entry below covers the write side — declaring a layout — which is a different half of the same feature.
• feat(tables): add partition_by and sorted_by configuration
• chore(query-runs): clarify user_public_id documentation
• feat(databases): add search parameter to list endpoint
• chore(databases): make pagination fields nullable
• feat(databases): add pagination support to list endpoint. DatabasesApi.list_databases gains limit and cursor, and the response gains count, has_more, and next_cursor. Note the behavior change: a call with no limit now returns a single page rather than every database, so callers that relied on one call seeing everything should follow next_cursor

... (truncated)

Commits

• c044475 chore: release v0.10.0 (#173)
• bdae174 refactor(auth): drop jwt exchange for api token (#158)
• d4faf57 chore: release v0.9.1 (#172)
• b1f9534 fix(auth): trust the JWT's own exp, and retry once on a 401 (#171)
• f04953c chore: add request/response examples and update documentation (#170)
• e4c6ddb feat(loads): add idempotency_key to load requests (#169)
• c678c91 feat(loads): support inline csv data in table load requests (#168)
• e70b90a feat(databases): add bulk operations and count endpoint (#167)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)