Bump pandoc to 1.13.2. Upstream have applied the no-https.patch