Update werkzeug to 0.13

[pyup-bot]

There's a new version of Werkzeug available.
You are currently using 0.11.10. I have updated it to 0.13

These links might come in handy: PyPI | Changelog | Homepage

Changelog

0.13

---

Released on December 7th 2017

• Deprecate support for Python 2.6 and 3.3. CI tests will not run
  for these versions, and support will be dropped completely in the next
  version. (pallets/meta24_)
• Raise TypeError when port is not an integer. (1088_)
• Fully deprecate werkzeug.script. Use Click_ instead. (1090_)
• response.age is parsed as a timedelta. Previously, it was
  incorrectly treated as a datetime. The header value is an integer
  number of seconds, not a date string. (414_)
• Fix a bug in TypeConversionDict where errors are not propagated
  when using the converter. (1102_)
• Authorization.qop is a string instead of a set, to comply with
  RFC 2617. (984_)
• An exception is raised when an encoded cookie is larger than, by
  default, 4093 bytes. Browsers may silently ignore cookies larger than
  this. BaseResponse has a new attribute max_cookie_size and
  dump_cookie has a new argument max_size to configure this.
  (780, 1109)
• Fix a TypeError in werkzeug.contrib.lint.GuardedIterator.close.
  (1116_)
• BaseResponse.calculate_content_length now correctly works for
  Unicode responses on Python 3. It first encodes using
  iter_encoded. (705_)
• Secure cookie contrib works with string secret key on Python 3.
  (1205_)
• Shared data middleware accepts a list instead of a dict of static
  locations to preserve lookup order. (1197_)
• HTTP header values without encoding can contain single quotes.
  (1208_)
• The built-in dev server supports receiving requests with chunked
  transfer encoding. (1198_)

.. _Click: https://www.palletsprojects.com/p/click/
.. _pallets/meta24: https://github.com/pallets/meta/issues/24
.. _414: pallets/werkzeug#414
.. _705: pallets/werkzeug#705
.. _780: pallets/werkzeug#780
.. _984: pallets/werkzeug#984
.. _1088: pallets/werkzeug#1088
.. _1090: pallets/werkzeug#1090
.. _1102: pallets/werkzeug#1102
.. _1109: pallets/werkzeug#1109
.. _1116: pallets/werkzeug#1116
.. _1197: pallets/werkzeug#1197
.. _1198: pallets/werkzeug#1198
.. _1205: pallets/werkzeug#1205
.. _1208: pallets/werkzeug#1208

0.12.2

---

Released on May 16 2017

• Fix regression: Pull request 892 prevented Werkzeug from correctly
  logging the IP of a remote client behind a reverse proxy, even when using
  ProxyFix.
• Fix a bug in safe_join on Windows.

0.12.1

---

Released on March 15th 2017

• Fix crash of reloader (used on debug mode) on Windows.
  (OSError: [WinError 10038]). See pull request 1081
• Partially revert change to class hierarchy of Headers. See 1084.

0.12

---

Released on March 10th 2017

• Spit out big deprecation warnings for werkzeug.script
• Use inspect.getfullargspec internally when available as
  inspect.getargspec is gone in 3.6
• Added support for status code 451 and 423
• Improved the build error suggestions. In particular only if
  someone stringifies the error will the suggestions be calculated.
• Added support for uWSGI's caching backend.
• Fix a bug where iterating over a FileStorage would result in an infinite
  loop.
• Datastructures now inherit from the relevant baseclasses from the
  collections module in the stdlib. See 794.
• Add support for recognizing NetBSD, OpenBSD, FreeBSD, DragonFlyBSD platforms
  in the user agent string.
• Recognize SeaMonkey browser name and version correctly
• Recognize Baiduspider, and bingbot user agents
• If LocalProxy's wrapped object is a function, refer to it with wrapped
  attribute.
• The defaults of generate_password_hash have been changed to more secure
  ones, see pull request 753.
• Add support for encoding in options header parsing, see pull request
  933.
• test.Client now properly handles Location headers with relative URLs, see
  pull request 879.
• When HTTPException is raised, it now prints the description, for easier
  debugging.
• Werkzeug's dict-like datastructures now have view-methods under Python 2,
  see pull request 968.
• Fix a bug in MultiPartParser when no stream_factory was provided
  during initialization, see pull request 973.
• Disable autocorrect and spellchecker in the debugger middleware's Python
  prompt, see pull request 994.
• Don't redirect to slash route when method doesn't match, see pull request
  907.
• Fix a bug when using SharedDataMiddleware with frozen packages, see pull
  request 959.
• Range header parsing function fixed for invalid values 974.
• Add support for byte Range Requests, see pull request 978.
• Use modern cryptographic defaults in the dev servers 1004.
• the post() method of the test client now accept file object through the data
  parameter.
• Color run_simple's terminal output based on HTTP codes 1013.
• Fix self-XSS in debugger console, see 1031.
• Fix IPython 5.x shell support, see 1033.

0.11.16

---

• werkzeug.serving: set CONTENT_TYPE / CONTENT_LENGTH if only they're provided by the client
• werkzeug.serving: Fix crash of reloader when using python -m werkzeug.serving.

0.11.15

---

Released on December 30th 2016.

• Bugfix for the bugfix in the previous release.

0.11.14

---

Released on December 30th 2016.

• Check if platform can fork before importing ForkingMixIn, raise exception
  when creating ForkingWSGIServer on such a platform, see PR 999.

0.11.13

---

Released on December 26th 2016.

• Correct fix for the reloader issuer on certain Windows installations.

0.11.12

---

Released on December 26th 2016.

• Fix more bugs in multidicts regarding empty lists. See 1000.
• Add some docstrings to some EnvironBuilder properties that were previously
  unintentionally missing.
• Added a workaround for the reloader on windows.

0.11.11

---

Released on August 31st 2016.

• Fix JSONRequestMixin for Python3. See 731
• Fix broken string handling in test client when passing integers. See 852
• Fix a bug in parse_options_header where an invalid content type
  starting with comma or semi-colon would result in an invalid return value,
  see issue 995.
• Fix a bug in multidicts when passing empty lists as values, see issue
  979.
• Fix a security issue that allows XSS on the Werkzeug debugger. See 1001.

Got merge conflicts? Close this PR and delete the branch. I'll create a new PR for you.

Happy merging! 🤖