bump underscore dependency to 1.4.2 to handle nullish arguments