Merge pull request #146 from nextcloud/dependabot/npm_and_yarn/underscore-1.9.0

Bump underscore from 1.8.3 to 1.9.0

package-lock.json

@@ -9882,9 +9882,9 @@
       "dev": true
     },
     "underscore": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz",
-      "integrity": "sha1-Tz+1OxBuYJf8+ctBCfKl6b36UCI=",
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/underscore/-/underscore-1.9.0.tgz",
+      "integrity": "sha512-4IV1DSSxC1QK48j9ONFK1MoIAKKkbE8i7u55w2R6IqBqbT7A/iG7aZBCR2Bi8piF0Uz+i/MG1aeqLwl/5vqF+A==",
       "dev": true
     },
     "union-value": {

package.json

@@ -25,7 +25,7 @@
     "karma-phantomjs-launcher": "^1.0.4",
     "karma-sourcemap-loader": "^0.3.7",
     "karma-webpack": "^3.0.0",
-    "underscore": "^1.8.3",
+    "underscore": "^1.9.0",
     "webpack": "^4.6.0",
     "webpack-cli": "^2.0.15",
     "webpack-merge": "^4.1.2"