chore(deps)(deps): bump convex from 1.31.7 to 1.36.1

[dependabot]

Bumps convex from 1.31.7 to 1.36.1.

Changelog

Sourced from convex's changelog.

1.36.1

• Updated npx convex login --vercel to ask before joining a Convex team through the Vercel Marketplace.

1.36.0

• npx convex run now supports --inline-query for evaluating readonly queries without creating a named function first, for example: npx convex run --inline-query 'await ctx.db.query("messages").take(5)'.
• Added ctx.meta to access extra metadata at runtime:
  • ctx.meta.getFunctionMetadata(): the current function's name, component, visibility, and whether it's a query, mutation, or action.
  • ctx.meta.getTransactionMetrics(): how much capacity remains in the current transaction. Only available in queries and mutations.
• Added a npx convex env default command for getting and setting default environment variables for a project.
• npx convex deploy now supports a --message option that allows you to write details in the deployment’s audit log. When running npx convex deploy on CI runners on popular platforms (including GitHub Actions, Vercel, and Netlify), a default message will be provided if you don’t provide one (e.g. “Deployed from GitHub Actions • e83c516”).
• When deploying to a preview deployment, you can now reuse the existing deployment instead of creating a new one by using --preview-name instead of --preview-create. This behavior is also used when deploying to preview deployments from the CI without specifying --preview-create explictly, but you can specify --preview-create explicitly to restore the old behavior. When using the --preview-run flag, the function only runs when a new deployment is created.
• npx convex codegen can now automatically start a local backend when necessary.
• You can now increase the timeout used by the CLI when starting a local backend with CONVEX_LOCAL_BACKEND_STARTUP_TIMEOUT_SECS; this can be useful when using large local databases.
• Fixed a bug where npx convex ai-files remove would also remove skill files that were not installed by npx convex ai-files
• Fixed a bug where the automatically-generated files would sometimes sort imports in inconsistent order across platforms.
• Fixed a bug in npx convex dev --start where, in some cases, the --start command would continue to run after closing the Convex dev server with Ctrl+C.
• Generating APIs via function-spec now supports validators with int64 literals.

1.35.1

• Adds support for automatic preview deployments on Cloudflare Pages
• Removes a new API in useQuery that was accidentally included as part of the 1.35.0 release.

1.35.0

• You can now create and select local deployments explicitly with the CLI:

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by aritrakh, a new releaser for convex since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 Golden Principles Validation

Overall Grade: B-
Total Violations: 9

Severity	Count
🔴 Critical	0
🟠 High	1
🟡 Medium	8
🔵 Low	0

View all violations

GP-013

• high: mcp-server/src/lib/lance-sync.ts:104
  • Pretty-printed JSON wastes ~30% tokens in MCP responses
  • Fix: Use JSON.stringify(data) without formatting args

GP-003

• medium: mcp-server/src/tools/chain-recall.ts
  • Tool file is 251 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/context-primitives.ts
  • Tool file is 203 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/defrag.ts
  • Tool file is 246 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/hierarchical-recall.ts
  • Tool file is 448 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/recall.ts
  • Tool file is 461 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/subspaces.ts
  • Tool file is 308 lines (guideline: ≤200). Consider splitting.
• medium: mcp-server/src/tools/system-prompt-builder.ts
  • Tool file is 342 lines (guideline: ≤200). Consider splitting.

GP-008

• medium: AGENTS.md
  • AGENTS.md is 250 lines (max: 150). Keep it a lean navigation map.

---

📚 Reference: Golden Principles | Validation Tool

[dependabot]

Superseded by #59.