deps(deps): update pikepdf requirement from >=10.8.0 to >=10.9.1

[dependabot]

Updates the requirements on pikepdf to permit the latest version.

Release notes

Sourced from pikepdf's releases.

v10.9.1

Fixed

• Fixed a crash (SIGABRT via std::terminate) that could occur when a file-backed {class}pikepdf.Pdf was deallocated while a Python exception was already propagating -- for example when pikepdf.open(filename) appears as a transient element of a list/tuple literal whose later element raises. Opening from a filename closes the file in the input source destructor, which calls back into Python; with an exception already in flight that call raised an error that escaped the destructor. The in-flight exception is now preserved and propagates normally. (#732) Added a guard for a likely non-reproducible related case with DecimalPrecision.

Commits

• 1cf65a1 Bump version: v10.9.1
• b4fe173 harden: guard DecimalPrecision destructor against exception escape
• 3634333 fix: prevent SIGABRT when Pdf is freed during exception unwind (#732)
• 367702e Bump version: v10.9.0
• 594a61f Update uv.lock (pyjwt security advisory)
• 355c611 docs: document reordering pages without breaking links (#192)
• d916070 docs: clarify AcroFormField.is_checked divergence from qpdf, add test
• 5a7fe1c refactor: adopt newer qpdf convenience APIs in C++ layer
• d4c846b Merge branch 'feature/named-dest-migration'
• 722465b fix: bump QPDF_MIN_VERSION to 12.3.2 to fix sdist build
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.