deps: Bump vgi from 0.9.1 to 0.9.5

[dependabot]

Bumps vgi from 0.9.1 to 0.9.5.

Release notes

Sourced from vgi's releases.

v0.9.3

TCP transport

Adds a raw Arrow-IPC TCP transport to the worker:

• transport::serve_tcp binds a TcpListener, emits the TCP:<host>:<port> discovery line (actual bound port), serves each connection on its own thread with idle-timeout self-shutdown, and sets TCP_NODELAY.
• Worker::run accepts --tcp [HOST:]PORT (host defaults to 127.0.0.1), alongside --unix/--http.
• Bumps vgi-rpc to 0.6.0 (TransportKind::Tcp).

Raw TCP framing carries no auth/TLS — loopback/trusted networks only; HTTP remains the transport for untrusted networks.

v0.9.2

Per-parameter documentation for macros: a macro's parameters can now carry descriptions (via the arguments_schema vgi_doc field metadata, mirroring functions), surfaced by the DuckDB extension's vgi_function_arguments() (function_type scalar_macro/table_macro). The example worker's macros are documented as a consistent cross-SDK reference.

🤖 Generated with Claude Code

Commits

• e1dfa3c release: bump version 0.9.4 -> 0.9.5
• d900862 fix(ci): skip multi_branch_join_optimizer on Windows (POSIX /tmp path)
• 1fa9e0c fix(ci): start http worker in $STAGE so COPY paths resolve
• 0a6c12e fix(worker): key HTTP bearer auth solely off VGI_BEARER_TOKENS
• c8960f0 ci(integration): track vgi main + resolve latest haybarn release
• 49178c0 feat(secret): port multi_secret_demo + fix secret_field/echo metadata
• fdaedc7 fix(ci): track vgi-rpc 0.7 in the doc-examples crate
• ccd264b fix(ci): satisfy fmt + clippy on the copy-from/copy-to changes
• fb0d4a2 test(copy-to): add header_repeat + fail_on_value to example_lines_out fixture
• 507ef1b feat(copy-to): worker-side COPY ... TO custom format support
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like vgi is up-to-date now, so this is no longer needed.