Relax Pillow version constraint to allow ≥12.1.1 (security fix for CVE-2026-25990)

[KatyaTyurina]

Hi SuperAnnotate team 👋

We noticed that the current SDK dependency pins Pillow to:

pillow >= 9.5, ~=10.0

However, Pillow versions below 12.1.1 are affected by CVE-2026-25990.
Because of this, we are required to upgrade to Pillow ≥12.1.1 in our environment.

At the moment, the current version constraint prevents us from doing so.

Could you please clarify:

1. Are there any known compatibility issues with Pillow 12.x?
2. Are there plans to widen the dependency constraint to allow Pillow ≥12.1.1?
3. Would you consider relaxing the bound (e.g., pillow>=9.5,<13) if compatibility allows?

This is currently blocking us from addressing a security vulnerability, so an update would be greatly appreciated.

Thank you!