Pinn collective.js.underscore to < 1.5.0 to prevent breaking
update changelog and docs