Update underscore to 1.12.1

[HarshaNalluru]

Component Governance from DevOps complains of the underscore dependency in azure-sdk-for-js repo.

• Pulled in by event-processor-host since it depends on azure-storage
• Need to update underscore to ^1.12.1 to fix the problem

[coveralls]

Coverage remained the same at 91.696% when pulling 35c3a76 on HarshaNalluru:harshan/update-underscore into 333c924 on Azure:master.

[coveralls]

Coverage remained the same at 91.696% when pulling 35c3a76 on HarshaNalluru:harshan/update-underscore into 333c924 on Azure:master.

[ramya-rao-a]

@XiaoningLiu Do you recall any reason why ~ was used here instead of ^
Am wondering if us making this change will cause any issues

[GuillermoBlanco]

@ramya-rao-a , @XiaoningLiu , could we run some integration tests in order to validate this security fix?

[goelankit]

Please update the package version as well. We are looking to consume this change downstream as we are getting security alerts as well for this dependency.

[phawxby]

@XiaoningLiu without a package update this merge isn't helping anyone.

[joaomoreno]

@HarshaNalluru Let's release this.

[EmmaZhu]

Hi,
We are working on a release for this. Should be able to release it in the next two weeks.

Thanks
Emma

[bsegault]

@EmmaZhu @XiaoningLiu Can we help in any way to speed up the release?