chore(deps): update dependency chrome-devtools-mcp to v0.12.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
chrome-devtools-mcp	0.11.0 -> 0.12.0

---

Release Notes

ChromeDevTools/chrome-devtools-mcp (chrome-devtools-mcp)

v0.12.0

Compare Source

🎉 Features

• support --auto-connect to a Chrome instance (#​651) (6ab6d85)
• support --user-data-dir with --auto-connect (#​654) (e3c59bc)

🛠️ Fixes

• map channel for resolveDefaultUserDataDir (#​658) (6f59b39)

📄 Documentation

• Add AX design principles (#​643) (90ed192)
• improve autoConnect docs (#​653) (09111cc)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🔒 MCP Security Scan Results

❌ chrome-devtools-mcp

• Status: Failed
• Tools scanned: 26
• Vulnerabilities found: 1

Security issues detected:

• [W004] The MCP server is not in our registry.

Allowed issues (not blocking):

• [TF001] Data leak toxic flow detected. The same agent has access to at least one tool that produces untrusted content, one tool that can access private data, and one tool that can behave as a public sink. For more information, see https://explorer.invariantlabs.ai/docs/mcp-scan/issue-code-reference/#TF001 (Allowed: Data leak risk acceptable - tool designed for browser automation and debugging workflows where external content interaction is essential. Chrome DevTools MCP server reads page content, console messages, and network requests which may contain sensitive information. Users should be aware of potential data exposure when automating browser interactions.)
• [TF002] Destructive toxic flow detected. The same agent has access to at least one tool that produces untrusted content and one tool that can behave destructively. For more information, see https://explorer.invariantlabs.ai/docs/mcp-scan/issue-code-reference/#TF002 (Allowed: Destructive flow risk acceptable - browser automation and debugging tools are core functionality. Chrome DevTools MCP includes tools for page navigation, script evaluation, and DOM manipulation. Users should only use with trusted prompts and be aware of the impact of browser automation actions.)

---

Summary: Scanned 1 MCP server(s), found 1 security issue(s).

⚠️ Action Required: Security issues were detected. Please review and address them before merging.