Release v10.9.0

[jtherrmann]

TODO:

• GET /user tested for https://hyp3-test-api.asf.alaska.edu with:
  • Logged into Vertex
  • Logged out of Vertex but pasted cookie into swagger ui doesn't work for me on either test or prod, so not sure if this feature ever worked
  • Bearer token
  • No auth method fails with 401 (No authorization token provided)
  • Bad bearer token fails with 401 (Invalid authorization token provided: Signature verification failed)
  • Bad cookie fails with 401 (Invalid authorization cookie provided: Signature verification failed)
• Update local API steps for bearer token #2815

[github-actions]

Developer checklist

• Indicated the level of changes to this package by affixing one of these labels:
  • major -- Major changes to the API that may break current workflows
  • minor -- Minor changes to the API that do not break current workflows
  • patch -- Patches and bugfixes for the current version that do not break current workflows
  • bumpless -- Changes to documentation, CI/CD pipelines, etc. that don't affect the software's version
• (If applicable) Updated the dependencies and indicated any downstream changes that are required
• Added/updated documentation for these changes
• Added/updated tests for these changes
• Verified changes in test deployment and summarized results, e.g. in PR description or comments on the related issue(s)
• If the step function code has changed, have you drained the job queue before merging?
  • For example, if the interface for a Lambda function has changed to expect different input,
    then currently running jobs (which use the old step function definition) will call the new
    function with the old input. So we must drain the job queue before deployment, so that the new
    function is only called by the new step function definition.

Reviewer checklist

• Have all dependencies been updated?
• Is the level of changes labeled appropriately?
• Are all the changes described appropriately in CHANGELOG.md?
• Has the documentation been adequately updated?
• Are the tests adequate?
• Have the changes been verified in the test deployment?