chore(deps)(deps): bump convex from 1.31.7 to 1.35.1 in /mcp-server

[dependabot]

Bumps convex from 1.31.7 to 1.35.1.

Changelog

Sourced from convex's changelog.

1.35.1

• Adds support for automatic preview deployments on Cloudflare Pages
• Removes a new API in useQuery that was accidentally included as part of the 1.35.0 release.

1.35.0

• You can now create and select local deployments explicitly with the CLI:
  • npx convex deployment create local --select: initialize local development.
  • npx convex deployment select dev: switch to your cloud dev deployment.
  • npx convex deployment select local: switch back to your local deployment.
  • To run a single command on your local deployment, use --deployment local.
• npx convex deployment create now has a --expiration flag allowing you to create temporary dpeloyments.
• Components can now define HTTP routes in their own http.ts file. The routes exposed by a component are accessible through a URL prefix that isolates them from the other HTTP routes (e.g. app.use(component, { httpPrefix: "/foo" })).
• npx convex dev now supports a new --start flag that runs a command in parallel with the Convex dev server (e.g. npx convex dev --start 'vite'). This new option can be used to simplify the dev command of most projects. This flag was previously called --run-sh, and used to not allow long-running commands; now, --run-sh is an alias of --start.
• Defaults non-interactive commands to target an anonymous deployment if one is not configured or specified by the deploy key. This enables coding agents to more easily develop without needing the CONVEX_AGENT_MODE env variable. By default, the CLI will avoid prompting in non-interactive terminals when possible.
• You can now develop against your anonymous local deployments even when logged in. You will be prompted to link the deployment to a project if the terminal is interactive.
• Enables npx convex deployment create when you don't yet have a project.
• You can now customize the list of AI agents npx convex ai-files installs skills for in the aiFiles.skills.agents field of convex.json (defaults to ["claude-code", "codex"]).
• Improved formatting of sizes in error messages.
• Changes the default codegen to use the component's ComponentApi type instead of static code generation for components in _generated/api.d.ts. To get the old behavior, set { "codegen": { "legacyComponentApi": true } } in convex.json.
• Fixed a bug where npx convex dev would not use the correct deployment after running npx convex deployment select.
• Improved the definition of the AnyDataModel type to support using default indexes (by_id, by_creation_time) in a typesafe way.

1.34.1

• Hides the --yes flag on npx convex deploy to discourage YOLO agents being run in privileged environments from pushing to production.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 Golden Principles Validation

Overall Grade: B-
Total Violations: 9

Severity	Count
🔴 Critical	0
🟠 High	1
🟡 Medium	8
🔵 Low	0

View all violations

GP-013

• high: mcp-server/src/lib/lance-sync.ts:104
  • Pretty-printed JSON wastes ~30% tokens in MCP responses
  • Fix: Use JSON.stringify(data) without formatting args

GP-003

• medium: mcp-server/src/tools/chain-recall.ts
  • Tool file is 251 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/context-primitives.ts
  • Tool file is 203 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/defrag.ts
  • Tool file is 246 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/hierarchical-recall.ts
  • Tool file is 448 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/recall.ts
  • Tool file is 461 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/subspaces.ts
  • Tool file is 308 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/system-prompt-builder.ts
  • Tool file is 342 lines (guideline: ≤200). Consider splitting.

GP-008

• medium: AGENTS.md
  • AGENTS.md is 250 lines (max: 150). Keep it a lean navigation map.

---

📚 Reference: Golden Principles | Validation Tool

[dependabot]

Superseded by #52.