Npm audit fixes

package.json

@@ -1,6 +1,6 @@
 {
   "name": "express-cart",
-  "version": "1.1.8",
+  "version": "1.1.9",
   "description": "A fully functioning Node.js shopping cart with Stripe, PayPal and Authorize.net payments.",
   "private": false,
   "scripts": {
@@ -25,7 +25,7 @@
     "glob": "^7.1.2",
     "helmet": "^3.6.1",
     "html-entities": "^1.2.0",
-    "lodash": "^4.13.1",
+    "lodash": "^4.17.10",
     "lunr": "^2.1.5",
     "mime-db": "^1.33.0",
     "mime-type": "^3.0.5",
@@ -52,7 +52,7 @@
     "eslint-plugin-node": "^5.2.1",
     "eslint-plugin-promise": "^3.6.0",
     "eslint-plugin-standard": "^3.0.1",
-    "gulp": "latest",
+    "gulp": "^4.0.0",
     "gulp-clean-css": "^3.9.2",
     "gulp-minify": "^2.1.0",
     "gulp-rename": "^1.2.2",