chore(deps): update hotdata requirement from <0.10,>=0.9.0 to >=0.9.0,<0.12

[dependabot]

Updates the requirements on hotdata to permit the latest version.

Release notes

Sourced from hotdata's releases.

hotdata 0.11.0

Removed

• Breaking: the Secrets, Refresh, and Connection Types endpoints were retired from the HotData API and are gone from the SDK: SecretsApi, RefreshApi, ConnectionTypesApi, and their request/response models (CreateSecretRequest, UpdateSecretRequest, RefreshRequest, etc.).
• Breaking: ConnectionsApi.check_connection_health and ConnectionHealthResponse are removed.
• Breaking: the data_refresh_table / data_refresh_connection JobType values and the corresponding JobResult variants (TableRefreshResult / ConnectionRefreshResult) are removed.

Changed

• chore(databases): clarify fork naming behavior
• docs: adopt "instant database" / "instant catalog" terminology in hand-written prose. Documentation only — all public API symbols (ManagedTableResponse, load_managed_table, the managed source type, etc.) are unchanged for compatibility. Generated docstrings pick up the new wording on the next client regeneration from the updated OpenAPI spec.
• feat(query): add dialect parameter to query request
• perf(transport): request compressed responses. urllib3 defaults every connection to Accept-Encoding: identity, which asks the server not to compress, so every JSON response came back uncompressed. The client now advertises urllib3.util.request.ACCEPT_ENCODING — exactly the codecs the installed urllib3 can transparently decode. Response bodies are unchanged; a caller or operation can still pass an explicit Accept-Encoding (matched case-insensitively). Arrow IPC fetches opt out and stay uncompressed, since their record batches are frequently compressed by the writer already.
• feat(transport): send an SDK User-Agent. Requests identified themselves as OpenAPI-Generator/1.0.0/python; they now send hotdata-python/<version> (Python/<py>; urllib3/<urllib3>). Setting ApiClient.user_agent still overrides it.

Changelog

Sourced from hotdata's changelog.

[0.11.0] - 2026-09-18

Removed

• Breaking: the Secrets, Refresh, and Connection Types endpoints were retired from the HotData API and are gone from the SDK: SecretsApi, RefreshApi, ConnectionTypesApi, and their request/response models (CreateSecretRequest, UpdateSecretRequest, RefreshRequest, etc.).
• Breaking: ConnectionsApi.check_connection_health and ConnectionHealthResponse are removed.
• Breaking: the data_refresh_table / data_refresh_connection JobType values and the corresponding JobResult variants (TableRefreshResult / ConnectionRefreshResult) are removed.

Changed

• chore(databases): clarify fork naming behavior
• docs: adopt "instant database" / "instant catalog" terminology in hand-written prose. Documentation only — all public API symbols (ManagedTableResponse, load_managed_table, the managed source type, etc.) are unchanged for compatibility. Generated docstrings pick up the new wording on the next client regeneration from the updated OpenAPI spec.
• feat(query): add dialect parameter to query request
• perf(transport): request compressed responses. urllib3 defaults every connection to Accept-Encoding: identity, which asks the server not to compress, so every JSON response came back uncompressed. The client now advertises urllib3.util.request.ACCEPT_ENCODING — exactly the codecs the installed urllib3 can transparently decode. Response bodies are unchanged; a caller or operation can still pass an explicit Accept-Encoding (matched case-insensitively). Arrow IPC fetches opt out and stay uncompressed, since their record batches are frequently compressed by the writer already.
• feat(transport): send an SDK User-Agent. Requests identified themselves as OpenAPI-Generator/1.0.0/python; they now send hotdata-python/<version> (Python/<py>; urllib3/<urllib3>). Setting ApiClient.user_agent still overrides it.

[0.10.0] - 2026-08-18

Removed

• Breaking: the API-token → JWT key exchange is deprecated and removed. The client no longer POSTs your token to /v1/auth/jwt, caches the minted JWT, or refreshes it with a refresh_token grant — the API token configured as api_key is sent verbatim as Authorization: Bearer <token>. The internal hotdata._auth module (and its TokenExchangeError) is gone, api_key is a plain attribute rather than a minting property, and the HOTDATA_DISABLE_JWT_EXCHANGE escape hatch no longer does anything (it is safe to unset). Callers passing an API token need no change; callers that were passing a pre-minted JWT can keep doing so, since it is now forwarded as the bearer credential like any other token.

... (truncated)

Commits

• b50b51c chore: release v0.11.0 (#196)
• cd42e2f feat(transport): set compression and User-Agent request defaults (#195)
• 6f03dfa fix(release): read the version after checking out the base (#192)
• 00391c3 Merge pull request #190 from hotdata-dev/docs/readme-accuracy
• bffa455 docs: fix the resource list in the README intro
• e7efc1b chore(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.3 (#182)
• a607ddf chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#164)
• 1050a4e chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#163)
• 00435bd ci: skip scenario-parity on dependabot PRs (#183)
• a530c20 chore(databases): clarify fork naming behavior (#181)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)