security: bump pillow to 10.2 to fix CVE-2022-22817

[Guts]

Not a real problem since it's just a test dependency. Still here comes the fix for https://github.com/advisories/GHSA-3f63-hfp8-52jq/dependabot?query=user%3Ageotribu

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).

[sonarcloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (393a46b) 67.67% compared to head (ee7ff27) 67.67%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #165   +/-   ##
=======================================
  Coverage   67.67%   67.67%           
=======================================
  Files          39       39           
  Lines        1646     1646           
  Branches      286      286           
=======================================
  Hits         1114     1114           
  Misses        469      469           
  Partials       63       63