fix: bump pillow to >=12.2.0 (CVE-2026-40192)

[mfleader]

What does this PR do?

Bump pillow to >=12.2.0 in dependencies and provider registry to address CVE-2026-40192, GHSA-whj4-6x5x-4v2j

Only applies to release-0.4.x; pillow already pinned >=12.2.0 on main.

Test Plan

No functional changes. Version floor pin only.

[github-actions]

✱ Stainless preview builds

This PR will update the llama-stack-client SDKs with the following commit message.

fix: bump pillow to >=12.2.0 (CVE-2026-40192)

Edit this comment to update it. It will appear in the SDK's changelogs.

✅ llama-stack-client-openapi studio · code · diff

Your SDK build had at least one "warning" diagnostic, but this did not represent a regression.
generate ⚠️

✅ llama-stack-client-node studio · conflict

Your SDK build resulted in a merge conflict between your custom code and the newly generated changes, but this did not represent a regression.

✅ llama-stack-client-python studio · conflict

Your SDK build resulted in a merge conflict between your custom code and the newly generated changes, but this did not represent a regression.

✅ llama-stack-client-go studio · conflict

Your SDK build resulted in a merge conflict between your custom code and the newly generated changes, but this did not represent a regression.

---

This comment is auto-generated by GitHub Actions and is automatically kept up to date as you push.
If you push custom code to the preview branch, re-run this workflow to update the comment.
Last updated: 2026-06-09 18:57:06 UTC