Solve dependabot issue with underscore version upgrade