lock package.json at Leaflet 1.0.x

even though the plugin IS compatiable with Leaflet 1.1.0, our test suite is currently throwing false positive errors.

this manual lock will allow us to review pending PRs and tag a new release of our own and save investigating Esri#967 for later.

.travis.yml

@@ -11,4 +11,4 @@ cache:
 before_script:
   - npm prune
 before_install:
-  - npm i -g npm@^4.0.0
+  - npm i -g npm@latest

package.json

@@ -13,7 +13,7 @@
   ],
   "dependencies": {
     "arcgis-to-geojson-utils": "^1.0.1",
-    "leaflet": "^1.0.0",
+    "leaflet": "^1.0.3",
     "leaflet-virtual-grid": "^1.0.3",
     "tiny-binary-search": "^1.0.2"
   },
@@ -25,26 +25,26 @@
     "husky": "^0.12.0",
     "isparta": "^4.0.0",
     "istanbul": "^0.4.2",
-    "karma": "^1.3.0",
+    "karma": "^1.7.0",
     "karma-chai-sinon": "^0.1.3",
     "karma-coverage": "^1.1.1",
     "karma-mocha": "^1.3.0",
     "karma-mocha-reporter": "^2.2.1",
     "karma-phantomjs-launcher": "^0.2.0",
     "karma-sourcemap-loader": "^0.3.5",
     "mkdirp": "^0.5.1",
-    "mocha": "^3.1.0",
+    "mocha": "^3.4.2",
     "parallelshell": "^2.0.0",
     "phantomjs": "^1.9.8",
     "rollup": "^0.25.4",
-    "rollup-plugin-json": "^2.0.0",
+    "rollup-plugin-json": "^2.3.0",
     "rollup-plugin-node-resolve": "^1.4.0",
     "rollup-plugin-uglify": "^0.3.1",
     "semistandard": "^9.0.0",
     "sinon": "^1.11.1",
     "sinon-chai": "2.8.0",
     "snazzy": "^5.0.0",
-    "uglify-js": "^2.6.1",
+    "uglify-js": "^2.8.29",
     "watch": "^0.17.1"
   },
   "homepage": "http://esri.github.io/esri-leaflet",
@@ -83,6 +83,13 @@
     "test": "npm run lint && karma start"
   },
   "semistandard": {
-    "globals": [ "expect", "L", "XMLHttpRequest", "sinon", "xhr", "proj4" ]
+    "globals": [
+      "expect",
+      "L",
+      "XMLHttpRequest",
+      "sinon",
+      "xhr",
+      "proj4"
+    ]
   }
 }