deps(pip): update pillow-heif requirement from >=0.13.0 to >=1.3.0

[dependabot]

Updates the requirements on pillow-heif to permit the latest version.

Release notes

Sourced from pillow-heif's releases.

v1.3.0

Added

• Pixel aspect ratio (pasp) read/write support. #408
• No-GIL (free-threaded Python) support. #405

Fixed

• Integer overflow in encode path buffer validation leading to heap out-of-bounds read. (CVE-2026-28231, GHSA-5gjj-6r7v-ph3x) Thanks to @​kaizawa97 for finding this!

Changelog

Sourced from pillow-heif's changelog.

[1.3.0 - 2026-02-27]

Added

• Pixel aspect ratio (pasp) read/write support. #408
• No-GIL (free-threaded Python) support. #405

Fixed

• Integer overflow in encode path buffer validation leading to heap out-of-bounds read. (CVE-2026-28231, GHSA-5gjj-6r7v-ph3x) Thanks to @​kaizawa97 for finding this!

[1.2.1 - 2026-02-18]

Fixed

• macOS: crash when cv2 and pillow_heif both bundle libx265 #403

[1.2.0 - 2026-01-23]

Changed

• libheif was updated from the 1.20.2 to 1.21.2 version. #399
• Dropped Python 3.9 support. #402
• PREFERRED_DECODER must now always be a valid, available decoder ID, or an exception will be raised. (libheif change)

Fixed

• PREFERRED_DECODER is now correctly taken into account when decoding depth and aux images. #399

[1.1.1 - 2025-09-30]

Changed

• libheif was updated from the 1.20.1 to 1.20.2 version.

Fixed

• macOS: Wheels now support older macOS versions like Catalina (x86_64 CPU) or Ventura (ARM CPU). #384 #385

[1.1.0 - 2025-08-02]

Added

• Python 3.14 wheels added.

Changed

• libheif was updated from the 1.19.8 to 1.20.1 version.

Fixed

... (truncated)

Commits

• 6bffca6 v1.3.0 [publish]
• 8305a15 fix: raise proper ValueError instead of SIGSEGV (#411)
• d9f773a feat: add pixel aspect ratio (pasp) read/write support (#408)
• 83ac5ca chore(deps): update github artifact actions (#394)
• 49c9254 use pytest.approx in the tests suite to satisfy RUF069 rule (#406)
• d306a8b chore(deps): update actions/checkout action to v6 (#393)
• 44643c8 feat: add no-GIL support (#405)
• 1d12ae3 v1.2.1 [publish]
• 9a24864 chore(deps): update dependency opencv-python to v4.13.0.92 (#401)
• e3982e4 fix(macOS): crash when cv2 and pillow_heif both bundle libx265 (#403)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)