chore(deps): bump marimo from 0.23.6 to 0.23.9

[dependabot]

Bumps marimo from 0.23.6 to 0.23.9.

Release notes

Sourced from marimo's releases.

0.23.9

What's Changed

This release makes opening a notebook in a second tab non-destructive, mo.ui.table adds new args for hidden_columns/visible_columns (mutually exclusive), and tightens sharing and error-output behavior across the board.

⭐️ Highlights

Open the same notebook in a second tab

Opening a notebook in a second browser tab no longer forcibly disconnects the first. The new tab joins as a live, read-only viewer, and you can take over editing from either side with a single click — no destructive modal and no reload required (#9746).

Show and hide table columns

mo.ui.table now supports column visibility. Hide and show columns from the column header menu, Column Explorer with a click, find columns fast with smart prefix-based search, and control initial visibility from Python. A hidden-count and "Unhide all" link keep things discoverable (#9687, #9696).

Cells with no output now show in slides

Because slides allow code edits, a slide edited to no longer produce an output used to disappear from the deck entirely. Such cells now appear in the slides minimap and viewer so you can edit them back in (they're still skipped during a presentation). Minimap thumbnails are also larger and more readable (#9771).

✨ Enhancements

• Add MARIMO_RESTRICT_SHARING env var machine-wide (#9756)
• Non-destructive local takeover (read-only viewer + bidirectional takeover) (#9746)
• Add cells with no output to the minimap & viewer (#9771)
• Add GET /api/kernel/status endpoint (#9768)
• Enforce sharing config as server-side security (#9578)
• Add filter param for regex and callable filtering (#9667)
• Slides config panel open by default (#9737)
• Add pair with agent link (#9738)
• Add Opus 4.8 and script to append models to the top (#9723)
• Remove mapping for 'src' to 'auto-mix-prep' (#9725)
• Add workflow to automate running llm-sync-models script (#9724)
• Automation script to pull models.yml (#9635)
• Support Dremio ADBC data source browsing (#9694)
• Add auto_close_pairs setting (#9711)
• WASM compatibility rule checks (#9587)
• Fix dropped error hints and improve error output UI (#9673)
• Column Explorer visibility controls + smart-search (#9696)
• Sort toml entries when writing config (#9686)

... (truncated)

Commits

• c3c0ee3 release: 0.23.9 (#9790)
• fdd55c8 fix: escape user-controlled file_key in service worker injection (#9789)
• dc35cdf feat(sharing): add MARIMO_RESTRICT_SHARING env var machine-wide (#9756)
• 6dcaff7 feat: non-destructive local takeover (read-only viewer + bidirectional takeov...
• d0352e2 slides: add cells with no output to the minimap & viewer (#9771)
• d9ab41a fix completions in slides view (#9769)
• c0f07c0 fix: arg/kwarg collision for local numpy vars in caching (#9751)
• 8d6e540 feat(server): add GET /api/kernel/status endpoint (#9768)
• e55e7ba fix(runtime): don't shadow builtin print unless mo.Thread is used (#9765) (#9...
• 4d47f09 fix(lsp): suppress marimo hover tooltip for all LSP providers, not just pylsp...
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

This pull request has been automatically marked as stale because it has not had
recent activity. It will be closed if no further activity occurs within the next 7 days.
Please comment if this PR is still relevant and should remain open.

[github-actions]

This pull request has been automatically marked as stale because it has not had
recent activity. It will be closed if no further activity occurs within the next 7 days.
Please comment if this PR is still relevant and should remain open.

[github-actions]

This pull request has been automatically closed due to inactivity.
If you would like to continue working on this, please reopen the PR or create a new one.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.