Bump transitive deps flagged by Dependabot

[taylordowns2000]

Refreshes the transitive dependencies from the open Dependabot PRs in one lockfile change, using yarn up -R (no package.json changes).

Package	Before	After
colord	2.9.3	2.10.0
browserslist	4.23.2	4.29.3
nanoid	3.3.16	3.3.20
dompurify	3.4.16	3.4.17
@babel/core	7.25.2 / 7.29.7	7.29.7

yarn generate-adaptors && yarn build passes locally for all locales.

Supersedes #852, #851, #837, #822, #814. Dependabot should close them on its own once this merges.

🤖 Generated with Claude Code