chore(deps)(deps): bump marked from 17.0.2 to 17.0.3 in /mcp-server

[dependabot]

Bumps marked from 17.0.2 to 17.0.3.

Release notes

Sourced from marked's releases.

v17.0.3

17.0.3 (2026-02-17)

Bug Fixes

• escape image alt text (#3896) (909fe44)

Commits

• bced615 chore(release): 17.0.3 [skip ci]
• 909fe44 fix: escape image alt text (#3896)
• eb8ba2b chore(deps-dev): Bump @​semantic-release/github from 12.0.5 to 12.0.6 (#3897)
• b7682a8 chore(deps-dev): Bump markdown-it from 14.1.0 to 14.1.1 (#3898)
• 3d615d9 chore(deps-dev): Bump rimraf from 6.1.2 to 6.1.3 (#3899)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 Golden Principles Validation

Overall Grade: C
Total Violations: 8

Severity	Count
🔴 Critical	0
🟠 High	6
🟡 Medium	2
🔵 Low	0

View all violations

GP-002

• high: mcp-server/src/lib/convex-client.ts:181
  • String literal Convex path: "functions/facts:bumpAccessBatch"
  • Fix: Use type-safe constant from convex-paths.ts
• high: mcp-server/src/lib/convex-client.ts:275
  • String literal Convex path: "functions/scopes:getByName"
  • Fix: Use type-safe constant from convex-paths.ts
• high: mcp-server/src/lib/convex-client.ts:284
  • String literal Convex path: "functions/scopes:getPermitted"
  • Fix: Use type-safe constant from convex-paths.ts
• high: mcp-server/src/lib/convex-client.ts:291
  • String literal Convex path: "functions/scopes:deleteScope"
  • Fix: Use type-safe constant from convex-paths.ts
• high: mcp-server/src/lib/convex-client.ts:303
  • String literal Convex path: "functions/scopes:create"
  • Fix: Use type-safe constant from convex-paths.ts
• high: mcp-server/src/lib/convex-client.ts:311
  • String literal Convex path: "functions/scopes:addMember"
  • Fix: Use type-safe constant from convex-paths.ts

GP-011

• medium: mcp-server/src/lib/tool-registry.ts
  • memory_set_config: 4 required params. Agents prefer optional defaults.
• medium: mcp-server/src/lib/tool-registry.ts
  • memory_create_theme: 5 required params. Agents prefer optional defaults.

---

📚 Reference: Golden Principles | Validation Tool

[github-actions]

🔍 Golden Principles Validation

Overall Grade: A-
Total Violations: 4

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	4
🔵 Low	0

View all violations

GP-003

• medium: mcp-server/src/tools/context-primitives.ts
  • Tool file is 203 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/hierarchical-recall.ts
  • Tool file is 233 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/recall.ts
  • Tool file is 214 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/system-prompt-builder.ts
  • Tool file is 209 lines (guideline: ≤200). Consider splitting.

---

📚 Reference: Golden Principles | Validation Tool

[dependabot]

Superseded by #22.