Bump underscore and express-mysql-session

[dependabot]

Removes underscore. It's no longer used after updating ancestor dependency express-mysql-session. These dependencies need to be updated together.

Removes underscore

Updates express-mysql-session from 2.1.8 to 3.0.3

Release notes

Sourced from express-mysql-session's releases.

v3.0.3

• Updated dependencies

v3.0.2

• Updated dependencies

v3.0.1

• Updated dependencies

v3.0.0

• Added "disableTouch" option.
• Switched MySQL client dependency from mysql to mysql2 module.
• General clean-up, including removal of several dependencies.
• express-session module no longer included as a direct dependency.
• Upgraded remaining dependencies to latest versions.
• Breaking API changes:
  • Old constructor usage from "0.x" version no longer supported - e.g. must now pass session module - require('express-mysql-session')(session)
  • Constructor no longer takes a callback. Use sessionStore.onReady() to get a promise which will resolve when the store is ready or reject on error.
  • See readme for latest usage details.

Changelog

Sourced from express-mysql-session's changelog.

Changelog

• v3.0.3:
  • Updated dependencies
• v3.0.2:
  • Updated dependencies
• v3.0.1:
  • Updated dependencies
• v3.0.0:
  • Added "disableTouch" option.
  • Switched MySQL client dependency from mysql to mysql2 module.
  • General clean-up, including removal of several dependencies.
  • express-session module no longer included as a direct dependency.
  • Upgraded remaining dependencies to latest versions.
  • Breaking API changes:
    • Old constructor usage from "0.x" version no longer supported - e.g. must now pass session module - require('express-mysql-session')(session)
    • Constructor no longer takes a callback. Use sessionStore.onReady() to get a promise which will resolve when the store is ready or reject on error.
    • See readme for latest usage details.
• v2.1.8:
  • Updated dependencies
• v2.1.7:
  • Updated dependencies
• v2.1.6:
  • Updated dependencies
• v2.1.5:
  • Updated dependencies
• v2.1.4:
  • Updated dependencies
• v2.1.3:
  • Update mysql module to "fix Amazon RDS profile for yaSSL MySQL servers with 2019 CA"; see here for more information.
• v2.1.2:
  • Fix for [issue #97](chill117/express-mysql-session#97). The new default type for the session data field is now mediumtext. This will allow up to 16MB of data to be stored per session. Existing session database tables will keep the old behavior which was limited to 64KB of data per session.
• v2.1.0:
  • get, all, and length will now exclude expired sessions. See #89 for more details.
  • Removed grunt; now using npm run tasks.
  • Updated dependencies
• v2.0.1:
  • Updated dependencies
• v2.0.0:
  • Added new flag clearExpired which when set to false will prevent expired sessions from being deleted automatically. The default value is true so the default behavior remains unchanged.
  • Fix for MySQL warning regarding unnecessary LIMIT 1 clauses. See #82 for more details.
  • Throw error when defining an unknown column in the schema option. See #83 for more details.
  • Removed deprecated methods (clone, closeStore, defaults, isObject, setDefaultOptions, sync)
• v1.3.0:
  • Updated dependencies
  • Fix for [issue #78](chill117/express-mysql-session#78)
  • Added support for promises in mysql query function; now works with node-mysql2's promise-only connections
• v1.2.3:
  • Updated dependencies
  • MySQLStore.close() will no longer end the database connection (if provided via constructor). See [issue #70](chill117/express-mysql-session#70) for more information. A new option has been added (endConnectionOnClose) to control this behavior.

... (truncated)

Commits

• 77d7a1e Version
• b6867ed Upgrade mysql2
• 6fd2304 Use latest, supported versions of nodejs in github actions
• a9fefdf Version
• 3adb18a Update dependencies
• 7c7ceaf Version
• b3a9c3f Updated dependencies
• 85e61e7 Added note re: mariadb compatibility
• 78f5d2f Fixup readme, package-lock, and CI naming
• 98a6958 Major refactor
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.