doc: Security update by Dependabot

Upgrade the Python Pillow package to 10.2.0 by the Dependabot alert. This package affects on other packages: PyYAML, reportlab and rst2pdf,
which were also upgraded in this commit.

**Dependabot alerts**
*< 10.0.0*: Pillow Denial of Service vulnerability. An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw instance operates on a long text argument.
*< 10.0.1*:
	- Bundled libwebp in Pillow vulnerable. Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
	- libwebp: OOB write in BuildHuffmanTable. Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.
*< 10.2.0*: Arbitrary Code Execution in Pillow. Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 (which was about the expression parameter).

doc/requirements.txt

@@ -9,13 +9,13 @@ importlib-metadata==6.0.0
 Jinja2==3.1.2
 MarkupSafe==2.1.1
 packaging==23.0
-Pillow==9.4.0
+Pillow==10.2.0
 Pygments==2.14.0
 pytz==2022.7.1
 PyYAML==6.0.1
-reportlab==3.6.12
+reportlab==4.0.9
 requests==2.28.2
-rst2pdf==0.99
+rst2pdf==0.101
 smartypants==2.0.1
 snowballstemmer==2.2.0
 Sphinx==5.3.0