[Security] Bump underscore.string from 3.3.4 to 3.3.5

Bumps [underscore.string](https://github.com/epeli/underscore.string) from 3.3.4 to 3.3.5. **This update includes security fixes.**
- [Release notes](https://github.com/epeli/underscore.string/releases)
- [Changelog](https://github.com/epeli/underscore.string/blob/master/CHANGELOG.markdown)
- [Commits](https://github.com/epeli/underscore.string/compare/3.3.4...3.3.5

)

Signed-off-by: dependabot[bot] <support@dependabot.com>