v12.5.1

• install: the SheetJS xlsx dependency is no longer fetched from cdn.sheetjs.com
  at install time; the same 0.20.3 build (integrity-verified, Apache-2.0 license
  included) is now vendored and compiled into the package. npm 12 blocks remote
  tarball dependencies by default (allow-remote=none), which made installing
  locize-cli fail; pnpm needed a similar workaround before
  (117,
  116).