bump lodash, @pnp/spfx-controls-react and gulp

---
updated-dependencies:
- dependency-name: lodash
  dependency-type: indirect
- dependency-name: "@pnp/spfx-controls-react"
  dependency-type: direct:production
- dependency-name: gulp
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

samples/react-check-flows/package.json

@@ -20,7 +20,7 @@
     "@pnp/logging": "^1.3.5",
     "@pnp/odata": "^1.3.5",
     "@pnp/sp": "^1.3.5",
-    "@pnp/spfx-controls-react": "^1.14.0",
+    "@pnp/spfx-controls-react": "^1.21.3",
     "@types/es6-promise": "0.0.33",
     "@types/react": "16.8.8",
     "@types/react-dom": "16.8.3",
@@ -38,7 +38,7 @@
     "@microsoft/sp-module-interfaces": "1.9.1",
     "@microsoft/sp-webpart-workbench": "1.12.1",
     "@microsoft/rush-stack-compiler-2.9": "0.7.16",
-    "gulp": "~3.9.1",
+    "gulp": "~4.0.2",
     "@types/chai": "3.4.34",
     "@types/mocha": "2.2.38",
     "ajv": "~5.2.2"