v12.5.4

• security: bumped gettext-converter to 1.3.4, which fixes a prototype
  pollution in its PO parser (GHSA-3qx4-pp8q-43c4).
  A .po/.pot file carrying a crafted msgctxt "__proto__" polluted
  Object.prototype while being converted, so anyone converting or uploading
  untrusted gettext files was affected. The dependency was pinned exactly, so
  this bump is required to pick the fix up.