Update dependencies.

Kept underscore to 1.6.x due to test failures.
package.json: sort some stuff alphabetically.