update roots-util; lock roots to 3.0.0-rc.10

allows this to work with npm v2