sync cdn and shipped version of leaflet.js (closes #4725754) [applied]