build(deps): bump sem-core from 0.23.0 to 0.23.1

[dependabot]

Bumps sem-core from 0.23.0 to 0.23.1.

Changelog

Sourced from sem-core's changelog.

[0.23.1] - 2026-08-22

Fixed

• CSV, JSON, and Vue entities no longer collide on generated ids with entities from other files. Their id-generation scheme is now disambiguated per plugin, closing a gap where two entities could silently collapse onto the same id and one would drop out of the graph.
• Entities from non-code files (Markdown, TOML, YAML, JSON, CSV, Vue/Svelte) now carry accurate byte ranges, so tools that rely on byte offsets (extraction, editing, highlighting) work correctly for these file types instead of getting an inaccurate span.
• Markdown headings that appear inside a fenced code block are no longer parsed as real document headings.
• TypeScript/JavaScript entity byte spans now include a leading export keyword when present, so extracting an exported declaration's exact source text no longer drops the export prefix. Facts schema v4 — existing caches rebuild automatically on first use.
• sem entities no longer opens the git repository through libgit2 on every call. That was a fixed per-call cost regardless of file size, disproportionately noticeable on small-file lookups; it's now only paid when actually needed.
• sem-mcp's query and limit parameters on the entities and context tools now work correctly (previously ignored).

Added

• sem-mcp: new find and grep tools, giving MCP clients the same fast entity-lookup and trigram-accelerated search already available from the CLI (sem find, sem grep).
• sem-mcp: entities and context tools accept format=json, returning structured JSON instead of human-readable text for callers that want to parse results programmatically.

Commits

• 134979c Release sem 0.23.1
• c5e45d6 Remove internal notes and tracker references from the public tree
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[inspect-review]

inspect review

Triage: 0 entities analyzed | 0 critical, 0 high, 0 medium, 0 low
Verdict: standard_review

Findings (0)

---

Reviewed by inspect | Entity-level triage found 0 high-risk changes