Bump pillow from 5.2.0 to 6.2.2

[dependabot[bot]]

Bumps pillow from 5.2.0 to 6.2.2.

Release notes

Sourced from pillow's releases.

6.2.2

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.2.html

6.2.1

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.1.html

6.2.0

https://pillow.readthedocs.io/en/stable/releasenotes/6.2.0.html

6.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/6.1.0.html

6.0.0

No release notes provided.

5.4.1

No release notes provided.

5.4.0

No release notes provided.

5.3.0

No release notes provided.

Changelog

Sourced from pillow's changelog.

6.2.2 (2020-01-02)

• This is the last Pillow release to support Python 2.7 #3642

• Overflow checks for realloc for tiff decoding. CVE-2020-5310 [wiredfool, radarhere]

• Catch SGI buffer overrun. CVE-2020-5311 [radarhere]

• Catch PCX P mode buffer overrun. CVE-2020-5312 [radarhere]

• Catch FLI buffer overrun. CVE-2020-5313 [radarhere]

• Raise an error for an invalid number of bands in FPX image. CVE-2019-19911 [wiredfool, radarhere]

6.2.1 (2019-10-21)

• Add support for Python 3.8 #4141 [hugovk]

6.2.0 (2019-10-01)

• Catch buffer overruns #4104 [radarhere]

• Initialize rows_per_strip when RowsPerStrip tag is missing #4034 [cgohlke, radarhere]

• Raise error if TIFF dimension is a string #4103 [radarhere]

• Added decompression bomb checks #4102 [radarhere]

• Fix ImageGrab.grab DPI scaling on Windows 10 version 1607+ #4000 [nulano, radarhere]

• Corrected negative seeks #4101 [radarhere]

• Added argument to capture all screens on Windows #3950 [nulano, radarhere]

... (truncated)

Commits

• a45c858 Release notes for 6.2.2
• 83efad4 6.2.2 version bump
• 4820f79 Added release notes [ci skip]
• 4e2def2 Overflow checks for realloc for tiff decoding
• a79b65c Catch SGI buffer overruns
• 93b22b8 Catch PCX P mode buffer overrun
• a09acd0 Catch FLI buffer overrun
• 774e53b Raise an error for an invalid number of bands in FPX image
• 8892aec Added security notes [ci skip]
• 46c35f0 Updated copyright year
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/anibali/pywebp/network/alerts).