Bump pillow to 10.2.0 (dependabot, see #5)