Updated dependencies and moved to xpath.js (which doesn't have global leaks).