update version of underscore dependency

fix #2874