2026-06-12

What's Changed

• chore(deps): bump starlette from 1.0.0 to 1.0.1 by @dependabot[bot] in #490
• Upgrade ODK 1.5.4 to 1.6.1; fix ontology and base-artifact IRIs by @turbomam in #487
• Reuse preview split lines, remove dead URI split, and preserve apostrophes in BacDive enum YAML by @Copilot in #485
• Ontology metadata: real creators/contributors, honest description, DC cleanup (+ artifact sync) by @turbomam in #495
• Dependabot: manage Python deps via uv ecosystem; retire broken uv-upgrade bot (closes #416) by @turbomam in #496
• chore(deps): bump the python-deps group with 16 updates by @dependabot[bot] in #497
• Harden GitHub Actions workflows: actionlint + zizmor + pinned actions by @turbomam in #507
• CI: artifact-freshness guardrail — fail when committed metpo.owl drifts from source (closes #499) by @turbomam in #504
• chore(deps): bump actions/checkout from 4 to 6.0.2 by @dependabot[bot] in #509
• Add SPARQL QC meta-test guardrail (closes #500) by @turbomam in #505
• Remove the ChromaDB pipeline (resolves critical CVE #455 + #401) by @turbomam in #498
• CLAUDE.md: propagate durable conventions from notes/memory by @turbomam in #510
• Label the deprecation vocabulary: IAO:0000231/0100001 + obsolescence-reason values (closes #519) by @turbomam in #520
• Add INCLUDE_OBSOLETE emission toggle for deprecated terms (#378) by @turbomam in #524
• chore(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in #529
• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #530
• chore(deps): bump tornado from 6.5.5 to 6.5.6 by @dependabot[bot] in #533
• Add gitleaks secret scanning (CI) by @turbomam in #527
• Remove NMDC from dcterms:description (no NMDC consumer) by @turbomam in #532

Full Changelog: 2026-06-02...2026-06-12