v6.3.1

• Update lodash security vulnerabilities
• gulp-stream still supports >=10.13 so update that as well