Update pillow requirement from <8.2,>=7.2 to >=7.2,<9.4 in /requirements

[dependabot[bot]]

Updates the requirements on pillow to permit the latest version.

Release notes

Sourced from pillow's releases.

9.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html

Changes

• Initialize libtiff buffer when saving #6699 [@​radarhere]
• Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [@​wiredfool]
• Inline fname2char to fix memory leak #6329 [@​nulano]
• Fix memory leaks related to text features #6330 [@​nulano]
• Use double quotes for version check on old CPython on Windows #6695 [@​hugovk]
• GHA: replace deprecated set-output command with GITHUB_OUTPUT file #6697 [@​nulano]
• Remove backup implementation of Round for Windows platforms #6693 [@​cgohlke]
• Upload fribidi.dll to GitHub Actions #6532 [@​nulano]
• Fixed set_variation_by_name offset #6445 [@​radarhere]
• Windows build improvements #6562 [@​nulano]
• Fix malloc in _imagingft.c:font_setvaraxes #6690 [@​cgohlke]
• Only use ASCII characters in C source file #6691 [@​cgohlke]
• Release Python GIL when converting images using matrix operations #6418 [@​hmaarrfk]
• Added ExifTags enums #6630 [@​radarhere]
• Do not modify previous frame when calculating delta in PNG #6683 [@​radarhere]
• Added support for reading BMP images with RLE4 compression #6674 [@​npjg]
• Decode JPEG compressed BLP1 data in original mode #6678 [@​radarhere]
• pylint warnings #6659 [@​marksmayo]
• Added GPS TIFF tag info #6661 [@​radarhere]
• Added conversion between RGB/RGBA/RGBX and LAB #6647 [@​radarhere]
• Do not attempt normalization if mode is already normal #6644 [@​radarhere]
• Fixed seeking to an L frame in a GIF #6576 [@​radarhere]
• Consider all frames when selecting mode for PNG save_all #6610 [@​radarhere]
• Don't reassign crc on ChunkStream close #6627 [@​radarhere]
• Raise a warning if NumPy failed to raise an error during conversion #6594 [@​radarhere]
• Only read a maximum of 100 bytes at a time in IMT header #6623 [@​radarhere]
• Show all frames in ImageShow #6611 [@​radarhere]
• Allow FLI palette chunk to not be first #6626 [@​radarhere]
• If first GIF frame has transparency for RGB_ALWAYS loading strategy, use RGBA mode #6592 [@​radarhere]
• Round box position to integer when pasting embedded color #6517 [@​radarhere]
• Removed EXIF prefix when saving WebP #6582 [@​radarhere]
• Pad IM palette to 768 bytes when saving #6579 [@​radarhere]
• Added DDS BC6H reading #6449 [@​ShadelessFox]
• Added support for opening WhiteIsZero 16-bit integer TIFF images #6642 [@​JayWiz]
• Raise an error when allocating translucent color to RGB palette #6654 [@​jsbueno]
• Moved mode check outside of loops #6650 [@​radarhere]
• Added reading of TIFF child images #6569 [@​radarhere]
• Improved ImageOps palette handling #6596 [@​PososikTeam]
• Defer parsing of palette into colors #6567 [@​radarhere]
• Apply transparency to P images in ImageTk.PhotoImage #6559 [@​radarhere]
• Use rounding in ImageOps contain() and pad() #6522 [@​bibinhashley]
• Fixed GIF remapping to palette with duplicate entries #6548 [@​radarhere]
• Allow remap_palette() to return an image with less than 256 palette entries #6543 [@​radarhere]
• Corrected BMP and TGA palette size when saving #6500 [@​radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

9.3.0 (2022-10-29)

• Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [wiredfool]

• Initialize libtiff buffer when saving #6699 [radarhere]

• Inline fname2char to fix memory leak #6329 [nulano]

• Fix memory leaks related to text features #6330 [nulano]

• Use double quotes for version check on old CPython on Windows #6695 [hugovk]

• Remove backup implementation of Round for Windows platforms #6693 [cgohlke]

• Fixed set_variation_by_name offset #6445 [radarhere]

• Fix malloc in _imagingft.c:font_setvaraxes #6690 [cgohlke]

• Release Python GIL when converting images using matrix operations #6418 [hmaarrfk]

• Added ExifTags enums #6630 [radarhere]

• Do not modify previous frame when calculating delta in PNG #6683 [radarhere]

• Added support for reading BMP images with RLE4 compression #6674 [npjg, radarhere]

• Decode JPEG compressed BLP1 data in original mode #6678 [radarhere]

• Added GPS TIFF tag info #6661 [radarhere]

• Added conversion between RGB/RGBA/RGBX and LAB #6647 [radarhere]

• Do not attempt normalization if mode is already normal #6644 [radarhere]

... (truncated)

Commits

• d594f4c Update CHANGES.rst [ci skip]
• 909dc64 9.3.0 version bump
• 1a51ce7 Merge pull request #6699 from hugovk/security-libtiff_buffer
• 2444cdd Merge pull request #6700 from hugovk/security-samples_per_pixel-sec
• 744f455 Added release notes
• 0846bfa Add to release notes
• 799a6a0 Fix linting
• 00b25fd Hide UserWarning in logs
• 05b175e Tighter test case
• 13f2c5a Prevent DOS with large SAMPLESPERPIXEL in Tiff IFD
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov[bot]]

Codecov Report

Merging #235 (8125b95) into master (35c3346) will increase coverage by 1.50%. The diff coverage is n/a.

Additional details and impacted files

[](https://codecov.io/gh/Guts/elgeopaso/pull/235?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien) ```diff @@ Coverage Diff @@ ## master #235 +/- ## ========================================== + Coverage 28.21% 29.71% +1.50% ========================================== Files 74 82 +8 Lines 2428 2480 +52 Branches 122 122 ========================================== + Hits 685 737 +52 Misses 1722 1722 Partials 21 21 ``` | [Impacted Files](https://codecov.io/gh/Guts/elgeopaso/pull/235?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien) | Coverage Δ | | |---|---|---| | [...lgeopaso/jobs/migrations/0002\_remove\_offer\_week.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2pvYnMvbWlncmF0aW9ucy8wMDAyX3JlbW92ZV9vZmZlcl93ZWVrLnB5) | `100.00% <0.00%> (ø)` | | | [elgeopaso/jobs/migrations/0001\_initial.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2pvYnMvbWlncmF0aW9ucy8wMDAxX2luaXRpYWwucHk=) | `100.00% <0.00%> (ø)` | | | [...lgeopaso/jobs/migrations/0003\_variations\_unique.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2pvYnMvbWlncmF0aW9ucy8wMDAzX3ZhcmlhdGlvbnNfdW5pcXVlLnB5) | `100.00% <0.00%> (ø)` | | | [elgeopaso/cms/migrations/0001\_cms.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2Ntcy9taWdyYXRpb25zLzAwMDFfY21zLnB5) | `100.00% <0.00%> (ø)` | | | [...lgeopaso/cms/migrations/0002\_auto\_20180308\_1417.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2Ntcy9taWdyYXRpb25zLzAwMDJfYXV0b18yMDE4MDMwOF8xNDE3LnB5) | `100.00% <0.00%> (ø)` | | | [elgeopaso/accounts/migrations/0001\_initial.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2FjY291bnRzL21pZ3JhdGlvbnMvMDAwMV9pbml0aWFsLnB5) | `100.00% <0.00%> (ø)` | | | [...lgeopaso/cms/migrations/0004\_auto\_20180628\_2357.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2Ntcy9taWdyYXRpb25zLzAwMDRfYXV0b18yMDE4MDYyOF8yMzU3LnB5) | `100.00% <0.00%> (ø)` | | | [...lgeopaso/cms/migrations/0003\_auto\_20180308\_1427.py](https://codecov.io/gh/Guts/elgeopaso/pull/235/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Julien#diff-ZWxnZW9wYXNvL2Ntcy9taWdyYXRpb25zLzAwMDNfYXV0b18yMDE4MDMwOF8xNDI3LnB5) | `100.00% <0.00%> (ø)` | |

[dependabot[bot]]

Superseded by #238.