Merge pull request #3948 from plotly/bump-tinycolor2

Bump tinycolor2 to 1.4.1 - as well as few dev-dependencies

Author: archmoj

package-lock.json

@@ -111,7 +111,7 @@
     "strongly-connected-components": "^1.0.1",
     "superscript-text": "^1.0.0",
     "svg-path-sdf": "^1.1.3",
-    "tinycolor2": "^1.3.0",
+    "tinycolor2": "^1.4.1",
     "topojson-client": "^2.1.0",
     "webgl-context": "^2.2.0",
     "world-calendars": "^1.0.3"
@@ -126,12 +126,12 @@
     "derequire": "^2.0.6",
     "ecstatic": "^3.3.1",
     "eslint": "^5.16.0",
-    "falafel": "^2.0.0",
+    "falafel": "^2.1.0",
     "fs-extra": "^2.0.0",
-    "fuse.js": "^3.4.4",
+    "fuse.js": "^3.4.5",
     "glob": "^7.1.4",
-    "gzip-size": "^5.1.0",
-    "image-size": "^0.6.3",
+    "gzip-size": "^5.1.1",
+    "image-size": "^0.7.4",
     "into-stream": "^4.0.0",
     "jasmine-core": "^2.99.1",
     "jsdom": "^11.12.0",
@@ -160,6 +160,6 @@
     "through2": "^3.0.1",
     "true-case-path": "^1.0.3",
     "watchify": "^3.11.1",
-    "xml2js": "^0.4.16"
+    "xml2js": "^0.4.19"
   }
 }