lock source maps test to `Firefox ESR` so it never changes
bump deps
1.0.1