Approved by Damien 2026-08-10 from the FOLIO tooling evaluation (decision record: ontokit-web docs/solutions/tooling-decisions/folio-tooling-evaluation.md).
- Declare folio-python as a required, pinned dependency in
pyproject.toml. Gated: pin only to a release containing the security fix — PyPI latest is 0.3.6 (2026-04-08) while upstream main fixed 5 high-severity Dependabot alerts on 2026-07-24 as an unpublished v0.3.7. Damien is driving the ALEA release of 0.3.7; land this once it publishes. Keep the graceful-degradation try/except and the renormalization path in duplicate_check_service.py as defense-in-depth.
- Remove owlready2 (
pyproject.toml:30, owlready2>=0.51): zero call sites anywhere in ontokit/, and LGPLv3 copyleft against the project's MIT. Regenerate the lockfile and run the suite.
One PR can cover both once 0.3.7 is on PyPI.
Approved by Damien 2026-08-10 from the FOLIO tooling evaluation (decision record: ontokit-web
docs/solutions/tooling-decisions/folio-tooling-evaluation.md).pyproject.toml. Gated: pin only to a release containing the security fix — PyPI latest is 0.3.6 (2026-04-08) while upstream main fixed 5 high-severity Dependabot alerts on 2026-07-24 as an unpublished v0.3.7. Damien is driving the ALEA release of 0.3.7; land this once it publishes. Keep the graceful-degradation try/except and the renormalization path induplicate_check_service.pyas defense-in-depth.pyproject.toml:30,owlready2>=0.51): zero call sites anywhere inontokit/, and LGPLv3 copyleft against the project's MIT. Regenerate the lockfile and run the suite.One PR can cover both once 0.3.7 is on PyPI.