Merge remote-tracking branch 'origin/0.12.x' into 1.0.x

CHANGES.rst

@@ -228,6 +228,16 @@ Released 2018-04-26
     :pr:`2676`
 
 
+Version 0.12.5
+--------------
+
+Released on February 10 2020
+
+-   Pin Werkzeug to < 1.0.0.  (`#3497`_)
+
+.. _#3497: https://github.com/pallets/flask/issues/3497
+
+
 Version 0.12.4
 --------------
 

setup.py

@@ -50,10 +50,10 @@ setup(
     include_package_data=True,
     python_requires=">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*",
     install_requires=[
-        "Werkzeug>=0.14",
-        "Jinja2>=2.10",
-        "itsdangerous>=0.24",
-        "click>=5.1",
+        'Werkzeug>=0.7,<1.0',
+        'Jinja2>=2.4',
+        'itsdangerous>=0.21',
+        'click>=2.0',
     ],
     extras_require={
         "dotenv": ["python-dotenv"],