Pin chromium to 3.0.3 to fix CI npm install failure

[Copilot]

Dependabot's bump of tmp and minimatch caused npm to also resolve chromium from 3.0.3 → 3.2171.3008. The newer version's postinstall script unconditionally attempts to run install.bat, breaking npm install on Linux with Error: spawn install.bat ENOENT.

Changes

• package.json: Tightened chromium from ^3.0.3 to 3.0.3 (exact pin) to prevent unintended upgrades
• package-lock.json: Regenerated to reflect pinned chromium 3.0.3 with its transitive deps; tmp@0.2.5 and minimatch@3.1.5 bumps are preserved

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• www.googleapis.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node install.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[Copilot]

Pull request overview

This PR pins the chromium devDependency to a known-working version to prevent CI breakage caused by npm resolving a much newer chromium release with a Linux-incompatible postinstall.

Changes:

• Pin chromium from ^3.0.3 to exact 3.0.3 in package.json.
• Regenerate package-lock.json to lock chromium@3.0.3 and its transitive dependency tree.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Pins chromium to an exact version to prevent unintended upgrades.
package-lock.json	Updates the lockfile to reflect chromium@3.0.3 and associated transitive deps.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.