diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..984e88e
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,53 @@
+# Changelog
+
+## [Unreleased]
+
+## [1.4.2] - 2021-05-13
+
+### Security
+
+- Upgrade lodash from 4.17.14 to 4.17.21 to mitigate [CVE-2021-23337](https://github.com/advisories/GHSA-35jh-r3h4-6jhm) and [CVE-2020-8203](https://github.com/advisories/GHSA-p6mc-m468-83gw).
+- Upgrade y18n from 4.0.0 to 4.0.3 to mitigate [CVE-2020-7774](https://github.com/advisories/GHSA-c4w7-xm78-47vh).
+
+## [1.4.1] - 2020-03-10
+
+- Upgrade lodash to 4.17.14 to mitigate [CVE-2019-10744](https://github.com/advisories/GHSA-jf85-cpcp-j695).
+
+## [1.4.0] - 2019-06-18
+
+- Upgrade through2 to 2.0.5.
+
+## [1.3.0] - 2018-09-17
+
+- Upgrade to RTLCSS 2.4.0.
+- Upgrade plugin-error to 1.0.1.
+
+## [1.2.0] - 2018-03-18
+
+- Upgrade to RTLCSS 2.2.1.
+
+## [1.1.0] - 2018-01-10
+
+- Add support for `gulp-sourcemaps`.
+- Remove `gulp-util` in favour of `plugin-error`.
+
+## [1.0.0] - 2016-02-18
+
+- [#6](https://github.com/jjlharrison/gulp-rtlcss/issues/6) Upgrade to RTLCSS 2.
+
+## [0.1.4] - 2015-01-28
+
+- [#2](https://github.com/jjlharrison/gulp-rtlcss/issues/2) Add support for RTLCSS configuration.
+
+[Unreleased]: https://github.com/jjlharrison/gulp-rtlcss/compare/v1.4.2...main
+[1.4.2]: https://github.com/jjlharrison/gulp-rtlcss/compare/v1.4.1...v1.4.2
+[1.4.1]: https://github.com/jjlharrison/gulp-rtlcss/compare/v1.4.0...v1.4.1
+[1.4.0]: https://github.com/jjlharrison/gulp-rtlcss/compare/v1.3.0...v1.4.0
+[1.3.0]: https://github.com/jjlharrison/gulp-rtlcss/compare/v1.2.0...v1.3.0
+[1.2.0]: https://github.com/jjlharrison/gulp-rtlcss/compare/v1.1.0...v1.2.0
+[1.1.0]: https://github.com/jjlharrison/gulp-rtlcss/compare/v1.0.0...v1.1.0
+[1.0.0]: https://github.com/jjlharrison/gulp-rtlcss/compare/v0.1.4...v1.0.0
+[0.1.4]: https://github.com/jjlharrison/gulp-rtlcss/compare/v0.1.3...v0.1.4
+[0.1.3]: https://github.com/jjlharrison/gulp-rtlcss/compare/v0.1.2...v0.1.3
+[0.1.2]: https://github.com/jjlharrison/gulp-rtlcss/compare/v0.1.1...v0.1.2
+[0.1.1]: https://github.com/jjlharrison/gulp-rtlcss/tree/v0.1.1
\ No newline at end of file
diff --git a/README.md b/README.md
index 1684fe0..7b3d5a1 100644
--- a/README.md
+++ b/README.md
@@ -50,38 +50,9 @@ gulp.task('styles', function () {
         .pipe(gulp.dest('dist')); // Output RTL stylesheets.
 });
 ```
-
 ## Change Log
 
-### 1.4.1 - 2020-03-10
-
-- Upgrade `lodash` to 4.17.14 to mitigate [CVE-2019-10744](https://github.com/advisories/GHSA-jf85-cpcp-j695).
-
-### 1.4.0 - 2019-06-18
-
-- Upgrade `through2` to 2.0.5.
-
-### 1.3.0 - 2018-09-17
-
-- Upgrade to RTLCSS 2.4.0.
-- Upgrade `plugin-error` to 1.0.1.
-
-### 1.2.0 - 2018-03-18
-
-- Upgrade to RTLCSS 2.2.1.
-
-### 1.1.0 - 2018-01-10
-
-- Add support for `gulp-sourcemaps`.
-- Remove `gulp-util` in favour of `plugin-error`.
-
-### 1.0.0 - 2016-02-18
-
-- [#6](https://github.com/jjlharrison/gulp-rtlcss/issues/6) Upgrade to RTLCSS 2.
-
-### 0.1.4 - 2015-01-28
-
-- [#2](https://github.com/jjlharrison/gulp-rtlcss/issues/2) Add support for RTLCSS configuration.
+See [CHANGELOG.md](CHANGELOG.md).
 
 [david-dm-image]: http://img.shields.io/david/jjlharrison/gulp-rtlcss.svg?style=flat
 [david-dm-url]: https://david-dm.org/jjlharrison/gulp-rtlcss
diff --git a/package-lock.json b/package-lock.json
index 65abb16..43ceaf4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -523,9 +523,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.14",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.14.tgz",
-      "integrity": "sha512-mmKYbW3GLuJeX+iGP+Y7Gp1AiGHGbXHCOh/jZmrawMmsE7MS4znI3RL2FsjbqOyMayHInjOeykW7PEajUk1/xw==",
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
       "dev": true
     },
     "log-symbols": {
@@ -1117,9 +1117,9 @@
       "integrity": "sha1-pcbVMr5lbiPbgg77lDofBJmNY68="
     },
     "y18n": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz",
-      "integrity": "sha512-r9S/ZyXu/Xu9q1tYlpsLIsa3EeLXXk0VwlxqTcFRfg9EhMW+17kbt9G0NrgCmhGb5vT2hyhJZLfDGx+7+5Uj/w==",
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
+      "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==",
       "dev": true
     },
     "yargs": {