chore(deps-dev): bump @types/chrome from 0.2.2 to 0.2.5

[dependabot]

Summary

Updates compile-time Chrome extension API declarations from 0.2.2 to 0.2.5.

Root Cause / Decision Record

• The dependency-only update was brought to current master for fresh evidence.
• It changes declarations and lockfile data only; no runtime package or extension behavior changes.
• Current-head CI and automated review remain required before merge.

Scope

• Runtime: none.
• Tests: existing type-check coverage.
• Docs/governance: PR evidence only.
• Explicitly out of scope: portal automation, permissions, release claims, and full-year behavior.

Pack Workflow Preflight

• Local pnpm workflow:preflight was not run on the Dependabot head; current-head CI is pending.
• This PR is opened from a Dependabot branch, not master.
• Current master Pack guidance was reviewed.
• PR body keeps the required Pack privacy/review/verification checklist visible.

Sanchika Adoption Gate

• This PR does not consume @sanchika/* packages or copied Sanchika guidance.
• This PR does not import parent source paths.

Privacy And Data-Flow Impact

• No new browser permissions, host permissions, network calls, analytics, telemetry, or sensitive-data capture.
• Public copy and privacy declarations are unchanged.

Sensitive Surface Review

• Target binding, download completion, service-worker durability, and sensitive-data boundaries are unchanged.
• The diff contains no taxpayer data, local paths, portal HTML, URLs, or session material.

Chrome Web Store Impact

• This PR does not change the Chrome Web Store V0 scope or full-year alpha status.
• Release packaging remains evidence, not Store-submission approval.

Verification

• Current-head Pack CI, review gate, and Codex review are pending.
• pnpm workflow:preflight was not run locally on the Dependabot branch.
• Existing type-check coverage is the relevant regression boundary.

Artifact Evidence

• CI run: pending current head.
• ZIP artifact and SHA-256: not applicable until CI completes.
• Clean source head: current Dependabot head.

PR Review Follow-Up

• GitHub Actions completed for the current head.
• Current-head Codex review is complete.
• No inline review threads are currently unresolved.
• No commits are pushed after final review.

Thread/comment	Disposition	Commit or evidence
None	pending current-head review	CI and review gate required

Screenshots

Not applicable: compile-time declaration dependency update.

DCO

• Dependabot commit includes its standard signed-off trailer.

[dependabot]

Labels

The following labels could not be found: dependencies, triage. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[lamemustafa]

@codex review

Requesting a fresh review of the current Dependabot head after adding the required Pack evidence and disposition register. The dependency diff itself is unchanged.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Another round soon, please!

Reviewed commit: f85659c48e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[lamemustafa]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Bravo.

Reviewed commit: c36570f2bd

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".