Update dev pillow pin to 12.3

[masenf]

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[codspeed-hq]

Merging this PR will not alter performance

✅ 26 untouched benchmarks
⏩ 8 skipped benchmarks¹

---

_{Comparing masenf/pillow-dev-12.3 (390c917) with main (ea721fd)}

Footnotes

1. 8 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[greptile-apps]

Greptile Summary

Updates the development lockfile from Pillow 12.2.0 to 12.3.0 to address reported vulnerabilities.

• Refreshes Pillow distribution URLs, hashes, and supported wheel entries in uv.lock.
• Adds the corresponding changelog fragment.

Confidence Score: 5/5

The PR appears safe to merge with no actionable changed-code failures identified.

The lockfile change is confined to Pillow 12.3.0 artifacts, while the unrelated vulnerable aiohttp version reported in dependency context is identical on the base and head revisions.

Important Files Changed

Filename	Overview
uv.lock	Updates the locked Pillow package and its distribution artifacts from 12.2.0 to 12.3.0; no actionable changed-code defect was established.
news/6836.chore.md	Adds a concise changelog entry describing the development dependency security update.

_{Reviews (1): Last reviewed commit: "add news fragment" | Re-trigger Greptile}