update Underscore.js dependency