chore(deps-dev): bump release-please from 17.10.1 to 17.11.1

[dependabot]

Summary

Updates the release automation dependency from 17.10.1 to 17.11.1.

Root Cause / Decision Record

• The prior release-please contract gap is covered by merged PR test(release): cover release-please API contract #133.
• This remains a development dependency and changes only package.json and the lockfile.
• Current-head CI and automated review remain required before merge.

Scope

• Runtime: release automation only.
• Tests: the installed release-please contract regression.
• Docs/governance: PR evidence only.
• Explicitly out of scope: extension runtime, portal automation, permissions, release claims, and full-year behavior.

Pack Workflow Preflight

• Local pnpm workflow:preflight was not run on the Dependabot head; current-head CI is pending.
• This PR is opened from a Dependabot branch, not master.
• Current master Pack guidance was reviewed.
• PR body keeps the required Pack privacy/review/verification checklist visible.

Sanchika Adoption Gate

• This PR does not consume @sanchika/* packages or copied Sanchika guidance.
• This PR does not import parent source paths.

Privacy And Data-Flow Impact

• No new browser permissions, host permissions, network calls, analytics, telemetry, or sensitive-data capture.
• Public copy and privacy declarations are unchanged.

Sensitive Surface Review

• Target binding, download completion, service-worker durability, and sensitive-data boundaries are unchanged.
• The diff contains no taxpayer data, local paths, portal HTML, URLs, or session material.

Chrome Web Store Impact

• This PR does not change the Chrome Web Store V0 scope or full-year alpha status.
• Release packaging remains evidence, not Store-submission approval.

Verification

• Current-head Pack CI, review gate, and Codex review are pending.
• pnpm workflow:preflight was not run locally on the Dependabot branch.
• The merged contract test provides the caller-visible installed-API regression boundary.

Artifact Evidence

• CI run: pending current head.
• ZIP artifact and SHA-256: not applicable until CI completes.
• Clean source head: current Dependabot head.

PR Review Follow-Up

• GitHub Actions completed for the current head.
• Current-head Codex review is complete.
• No inline review threads are currently unresolved.
• No commits are pushed after final review.

Thread/comment	Disposition	Commit or evidence
None	pending current-head review	CI and review gate required

Screenshots

Not applicable: release automation dependency update.

DCO

• Dependabot commit includes its standard signed-off trailer.

[dependabot]

Labels

The following labels could not be found: dependencies, triage. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[lamemustafa]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. 🚀

Reviewed commit: 3d5082a7d8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".