Bump bcrypt from 3.1.12 to 3.1.13

[dependabot-preview]

Bumps bcrypt from 3.1.12 to 3.1.13.

Changelog

Sourced from bcrypt's changelog.

1.0.0 Feb 27 2007

• Initial release.

2.0.0 Mar 07 2007

• Removed BCrypt::Password#exactly_equals -- use BCrypt::Password#eql? instead.
• Added BCrypt::Password#is_password?.
• Refactored out BCrypt::Internals into more useful BCrypt::Engine.
• Added validation of secrets -- nil is not healthy.

2.0.1 Mar 09 2007

• Fixed load path issues
• Fixed crashes when hashing weird values (e.g., false, etc.)

2.0.2 Jun 06 2007

• Fixed example code in the README [Winson]
• Fixed Solaris compatibility [Jeremy LaTrasse, Twitter crew]

2.0.3 May 07 2008

• Made exception classes descend from StandardError, not Exception [Dan42]
• Changed BCrypt::Engine.hash to BCrypt::Engine.hash_secret to avoid Merb
  sorting issues. [Lee Pope]

2.0.4 Mar 09 2009

• Added Ruby 1.9 compatibility. [Genki Takiuchi]
• Fixed segfaults on some different types of empty strings. [Mike Pomraning]

2.0.5 Mar 11 2009

• Fixed Ruby 1.8.5 compatibility. [Mike Pomraning]

2.1.0 Aug 12 2009

• Improved code coverage, unit tests, and build chain. [Hongli Lai]
• Ruby 1.9 compatibility fixes. [Hongli Lai]
• JRuby support, using Damien Miller's jBCrypt. [Hongli Lai]
• Ruby 1.9 GIL releasing for high-cost hashes. [Hongli Lai]

2.1.1 Aug 14 2009

• JVM 1.4/1.5 compatibility [Hongli Lai]

2.1.2 Sep 16 2009

• Fixed support for Solaris, OpenSolaris.

3.0.0 Aug 24 2011

• Bcrypt C implementation replaced with a public domain implementation.
• License changed to MIT

3.0.1 Sep 12 2011

• create raises an exception if the cost is higher than 31. GH #27

3.1.0 May 07 2013

• Add BCrypt::Password.valid_hash?(str) to check if a string is a valid bcrypt password hash

... (truncated)

Commits

• 011b67b Merge pull request #198 from codahale/update-deps
• 7a56f3b Merge pull request #195 from olleolleolle/appveyor-build-with-bundler-1
• ada5f12 Removing the dev dep on RDoc
• c78dde9 bumping version
• bd77e38 use Bundler < 2 in Appveyor builds
• 7644e36 Merge pull request #189 from adam12/skip-gnu-crypt-functions
• 84c8d7b Merge pull request #190 from fliiiix/patch-1
• b6d7abf Use https for links
• 818dbb5 Update Website link in readme
• 613daca Define SKIP_GNU token when building extension
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.