Pin pillow version, update Debian/Python (#18)

Author: gfrn

Dockerfile

@@ -3,7 +3,7 @@
 # The devcontainer should use the build target and run as root with podman
 # or docker with user namespaces.
 #
-FROM docker.io/library/python:3.13.7-slim-bookworm as build
+FROM docker.io/library/python:3.13.9-slim-trixie as build
 
 # Add any system dependencies for the developer/build environment here
 RUN apt-get update && apt-get upgrade -y && \
@@ -37,7 +37,7 @@ RUN pip install --upgrade pip && \
     # and replace with a comment to avoid a zero length asset upload later
     sed -i '/file:/s/^/# Requirements for /' lockfiles/requirements.txt
 
-FROM docker.io/library/python:3.13.7-slim-bookworm as runtime
+FROM docker.io/library/python:3.13.9-slim-trixie as runtime
 
 RUN adduser --system --no-create-home --uid 1001 nonroot
 

pyproject.toml

@@ -26,6 +26,7 @@ dependencies = [
     "fpdf2~=2.8.4",
     "qrcode~=8.2.0",
     "pyjwt[crypto]~=2.10.1",
+    "pillow==11.3.0",
     "alembic"
 ]
 dynamic = ["version"]