build(deps): bump followthemoney from 4.9.2 to 4.10.0

[dependabot]

Bumps followthemoney from 4.9.2 to 4.10.0.

Release notes

Sourced from followthemoney's releases.

v4.10.0

What's changed in 4.10.0

CLI: ftm ref slimmed down for agent context (#316)

The ftm ref model-reference commands now emit much terser JSON, designed to be loaded into LLM agent context without wasting tokens:

• Enum value listings moved into a dedicated ftm ref type-values NAME command (accepts singular or plural type names, e.g. country/countries). ref type and ref prop now report a values_count and point there instead of inlining hundreds of country/language codes.
• All ref JSON is recursively slimmed: redundant fields (maxLength, plural, pivot, false matchable/abstract/enum, labels that merely echo the name) are dropped.
• ref schema is reshaped into a compact field index of {name, type} entries, with hidden and deprecated properties skipped.
• Stub (reverse-edge) properties are now included in ref schema, annotated with the forward property they mirror (e.g. "reverse": "Ownership:owner"). The --stubs flag is gone.

TypeScript library

• Entity now parses and round-trips the entity-level metadata emitted by the Python ValueEntity serialization — caption, datasets, referents, first_seen, last_seen, last_change — which was previously dropped on input and lost on toJSON(). getCaption() prefers the precomputed caption over deriving one from schema caption properties, matching Python precedence. (#328)
• New IStatementDatum interface: a typed mirror of the Python StatementDict statement wire format, including the optional prop_type field added by the OpenSanctions statement API and CSV exports. (#329)
• Removed the phantom required field from IEdgeSpecification, which the Python model never emits.

Schema & vocabulary

• The sanction.control topic is now labelled "Controls sanctioned entity" (was: "Sanction ownership or control"), and its description was clarified — the old wording read as if the sanction itself were being controlled. (#327, thanks @​jbothma)
• Fixed a typo in the Occupancy:constituency description. (#317, thanks @​leonhandreke)

Fixes

• The ontology docs build now runs via python -m to avoid the package's types module shadowing the stdlib under Python 3.13.

Plus routine dependency updates across the JS and Java packages.

Full changelog: opensanctions/followthemoney@v4.9.2...v4.10.0

Commits

• 4694eeb Bump version: 4.9.2 → 4.10.0
• dca6863 Run ontology build via -m to avoid stdlib shadowing
• 37426d2 Merge pull request #329 from opensanctions/pudo/js-statement-datum
• c145dad Merge pull request #328 from opensanctions/pudo/js-entity-metadata
• 3558ac9 js: add IStatementDatum for the statement wire format
• 688ce73 js: expose ValueEntity metadata on Entity
• c62fc9f js deps
• c7f566f Merge pull request #316 from opensanctions/pudo/ref-slim-json
• 7064f16 Merge pull request #322 from opensanctions/dependabot/npm_and_yarn/js/lint-st...
• 15c8919 Merge pull request #325 from opensanctions/dependabot/npm_and_yarn/js/typescr...
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
followthemoney	[>= 4.2.dev0, < 4.3]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​followthemoney@​4.9.2 ⏵ 4.10.0	+1

View full report

[dependabot]

Superseded by #1229.