From 57a025af60c9c0d087a28ad8779da528897b2c7f Mon Sep 17 00:00:00 2001
From: Carl Chalmers <chalmerscarl@microsoft.com>
Date: Mon, 27 Jul 2026 15:47:56 +0100
Subject: [PATCH] Bump Pillow 12.2.0 -> 12.3.0 to close 13 dependabot alerts

Verified end-to-end on the test Pi: sparrow container rebuild,
Python 3.12.13 + Pillow 12.3.0 + torch 2.10.0 all load cleanly, injected
test JPEG round-trips through inference (letterbox -> ONNX MegaDetector
-> torchvision NMS -> Pillow save with EXIF), lands in gallery with
matching detections.csv row.
---
 sparrow/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sparrow/requirements.txt b/sparrow/requirements.txt
index 1a38286..24465d7 100644
--- a/sparrow/requirements.txt
+++ b/sparrow/requirements.txt
@@ -10,7 +10,7 @@ filelock==3.20.3
 smbus2==0.4.1
 pyserial==3.5
 tqdm==4.66.5
-Pillow==12.2.0
+Pillow==12.3.0
 numpy==1.26.4
 pandas==2.2.3
 torch==2.10.0