Update pillow requirement from <5 to <9

[dependabot-preview]

Updates the requirements on pillow to permit the latest version.

Release notes

Sourced from pillow's releases.

8.0.0

https://pillow.readthedocs.io/en/stable/releasenotes/8.0.0.html

Changelog

Sourced from pillow's changelog.

8.0.0 (2020-10-15)

• Drop support for EOL Python 3.5 #4746, #4794 [hugovk, radarhere, nulano]
• Drop support for PyPy3 < 7.2.0 #4964 [nulano]
• Remove ImageCms.CmsProfile attributes deprecated since 3.2.0 #4768 [hugovk, radarhere]
• Remove long-deprecated Image.py functions #4798 [hugovk, nulano, radarhere]
• Add support for 16-bit precision JPEG quantization values #4918 [gofr]
• Added reading of IFD tag type #4979 [radarhere]
• Initialize offset memory for PyImagingPhotoPut #4806 [nqbit]
• Fix TiffDecode comparison warnings #4756 [nulano]
• Docs: Add dark mode #4968 [hugovk, nulano]
• Added macOS SDK install path to library and include directories #4974 [radarhere, fxcoudert]
• Imaging.h: prevent confusion with system #4923 [ax3l, ,radarhere]
• Avoid using pkg_resources in PIL.features.pilinfo #4975 [nulano]
• Add getlength and getbbox functions for TrueType fonts #4959 [nulano, radarhere, hugovk]
• Allow tuples with one item to give single color value in getink #4927 [radarhere, nulano]
• Add support for CBDT and COLR fonts #4955 [nulano, hugovk]
• Removed OSError in favour of DecompressionBombError for BMP #4966 [radarhere]
• Implemented another ellipse drawing algorithm #4523 [xtsm, radarhere]
• Removed unused JpegImagePlugin._fixup_dict function #4957 [radarhere]
• Added reading and writing of private PNG chunks #4292 [radarhere]
• Implement anchor for TrueType fonts #4930 [nulano, hugovk]
• Fixed bug in Exif __delitem__ #4942 [radarhere]
• Fix crash in ImageTk.PhotoImage on MinGW 64-bit #4946 [nulano]
• Moved CVE images to pillow-depends #4929 [radarhere]
• Refactor font_getsize and font_render #4910 [nulano]
• Fixed loading profile with non-ASCII path on Windows #4914 [radarhere]
• Fixed effect_spread bug for zero distance #4908 [radarhere, hugovk]
• Added formats parameter to Image.open #4837 [nulano, radarhere]
• Added regular_polygon draw method #4846 [comhar]
• Raise proper TypeError in putpixel #4882 [nulano, hugovk]
• Added writing of subIFDs #4862 [radarhere]
• Fix IFDRational __eq__ bug #4888 [luphord, radarhere]
• Fixed duplicate variable name #4885 [liZe, radarhere]
• Added homebrew zlib include directory #4842 [radarhere]
• Corrected inverted PDF CMYK colors #4866 [radarhere]
• Do not try to close file pointer if file pointer is empty #4823 [radarhere]
• ImageOps.autocontrast: add mask parameter #4843 [navneeth, hugovk]
• Read EXIF data tEXt chunk into info as bytes instead of string #4828 [radarhere]
• Replaced distutils with setuptools #4797, #4809, #4814, #4817, #4829, #4890 [hugovk, radarhere]
• Add MIME type to PsdImagePlugin #4788 [samamorgan]
• Allow ImageOps.autocontrast to specify low and high cutoffs separately #4749 [millionhz, radarhere]

7.2.0 (2020-07-01)

• Do not convert I;16 images when showing PNGs #4744 [radarhere]
• Fixed ICNS file pointer saving #4741 [radarhere]
• Fixed loading non-RGBA mode APNGs with dispose background #4742 [radarhere]

Commits

• 235a7d6 8.0.0 version bump
• c93c642 Add dark mode to release notes [CI skip]
• 1799a7b Removals first
• 1787ec0 Update CHANGES.rst
• 1cb3e2f Merge pull request #4918 from gofr/4825-jpeg-16-bit-qt
• 04f1b38 Merge pull request #4979 from radarhere/ifd
• 14643d5 Merge pull request #4806 from nqbit/msan_bug
• e58baa0 Merge pull request #4756 from nulano/warn-tiff
• 8aa6a5e Merge pull request #4968 from hugovk/dark-mode
• 1a66e2f Merge pull request #4974 from radarhere/sdk
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)