chore(deps): bump the prod-minor-patch group in /apps/client with 2 updates

[dependabot]

Bumps the prod-minor-patch group in /apps/client with 2 updates: i18next-resources-to-backend and motion.

Updates i18next-resources-to-backend from 1.2.1 to 1.2.2

Changelog

Sourced from i18next-resources-to-backend's changelog.

1.2.2

• security: validate language and namespace in read() before they are passed to the loader. i18next resolves any string as a language unless supportedLngs is set, so these values can carry whatever a language detector picked up from the querystring, path or a cookie. The documented usage pattern is import(./locales/${language}/${namespace}.json), and while a bundler compiles that template to a fixed context map, an unbundled ESM runtime (Node SSR) resolves the specifier against the filesystem, where a crafted value escapes the locales directory. Values containing .., \, control characters, __proto__ / constructor / prototype, or longer than 128 characters are now rejected with an error and the loader is never called; / is rejected for language but allowed for namespace, where nested layouts such as a/b are legitimate. The same check keeps the static-resources lookup off Object.prototype.

Commits

• 7992601 1.2.2
• 8b7240c cosmetics
• 1d45d0b security: validate language/namespace before calling the loader
• 75a31f8 README: mention npx i18next-cli localize as the zero-to-localized path
• 12858c7 Add Locize advice section near the top of README
• e3f24cd Modernize locize.com URLs and refresh UTM tags
• 33a1f29 chore: ignore .env*, *.pem, *.key in .gitignore
• See full diff in compare view

Updates motion from 12.42.2 to 12.43.0

Changelog

Sourced from motion's changelog.

[12.43.0] 2026-07-27

Added

• Hardware acceleration for backgroundColor in supported browsers.
• Hardware acceleration for SVG elements.

Fixed

• AnimatePresence: Exiting children no longer interleave with entering children, which could reorder and remount children present in both renders.
• motion: Throw error when passing a custom motion component an incorrect ref type.

Commits

• a4ef40a v12.43.0
• 14f2d28 adding svg acceleration
• 1f5a27b Fixing merge
• 79f0353 Updating changelog
• 57f179b Updating changelog
• 695cb39 Merge pull request #3755 from motiondivision/fix-issue-2777
• 33a1820 Drop the production fallback for non-DOM refs
• ebe35f2 Throw an actionable invariant for non-DOM custom component refs
• a6ed094 Merge pull request #3754 from motiondivision/fix-3745-popchild-ref-warning
• 9f251f3 Merge pull request #3763 from motiondivision/advisor/003-color-waapi
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions