chore(deps): bump hotdata from 0.9.0 to 0.10.0

[dependabot]

Bumps hotdata from 0.9.0 to 0.10.0.

Release notes

Sourced from hotdata's releases.

hotdata 0.10.0

Removed

• Breaking: the API-token → JWT key exchange is deprecated and removed. The client no longer POSTs your token to /v1/auth/jwt, caches the minted JWT, or refreshes it with a refresh_token grant — the API token configured as api_key is sent verbatim as Authorization: Bearer <token>. The internal hotdata._auth module (and its TokenExchangeError) is gone, api_key is a plain attribute rather than a minting property, and the HOTDATA_DISABLE_JWT_EXCHANGE escape hatch no longer does anything (it is safe to unset). Callers passing an API token need no change; callers that were passing a pre-minted JWT can keep doing so, since it is now forwarded as the bearer credential like any other token.

hotdata 0.9.1

Fixed

• fix(auth): take a token's expiry from its own exp claim, and retry once on a 401

Changed

• chore: add request/response examples and update documentation
• feat(loads): add idempotency_key to load requests
• feat(loads): support inline csv data in table load requests
• feat(databases): add bulk operations and count endpoint

Changelog

Sourced from hotdata's changelog.

[0.10.0] - 2026-08-18

Removed

• Breaking: the API-token → JWT key exchange is deprecated and removed. The client no longer POSTs your token to /v1/auth/jwt, caches the minted JWT, or refreshes it with a refresh_token grant — the API token configured as api_key is sent verbatim as Authorization: Bearer <token>. The internal hotdata._auth module (and its TokenExchangeError) is gone, api_key is a plain attribute rather than a minting property, and the HOTDATA_DISABLE_JWT_EXCHANGE escape hatch no longer does anything (it is safe to unset). Callers passing an API token need no change; callers that were passing a pre-minted JWT can keep doing so, since it is now forwarded as the bearer credential like any other token.

[0.9.1] - 2026-08-18

Fixed

• fix(auth): take a token's expiry from its own exp claim, and retry once on a 401

Changed

• chore: add request/response examples and update documentation
• feat(loads): add idempotency_key to load requests
• feat(loads): support inline csv data in table load requests
• feat(databases): add bulk operations and count endpoint

Commits

• c044475 chore: release v0.10.0 (#173)
• bdae174 refactor(auth): drop jwt exchange for api token (#158)
• d4faf57 chore: release v0.9.1 (#172)
• b1f9534 fix(auth): trust the JWT's own exp, and retry once on a 401 (#171)
• f04953c chore: add request/response examples and update documentation (#170)
• e4c6ddb feat(loads): add idempotency_key to load requests (#169)
• c678c91 feat(loads): support inline csv data in table load requests (#168)
• e70b90a feat(databases): add bulk operations and count endpoint (#167)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)