ci: refresh lock file and benchmark baselines

Bump pillow to 12.3.0 in requirements-lock.txt to match pip-compile
resolution. Refresh benchmark baselines from ubuntu-latest CI timings
after stale-floor failures on faster runners.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: medstreamline-star

benchmarks/baselines.json

@@ -1,32 +1,32 @@
 {
   "_note": "Gated means from ubuntu-latest CI benchmark-results.json. Values multiplied by 1.5x slack at generation time. Excluded from gate (recorded for reference): test_summary_cache_round_trip. Refresh after intentional speedups via reduce_baselines.py.",
-  "updated": "2026-06-25T23:36:11Z",
+  "updated": "2026-07-15T16:06:06Z",
   "machine": "Linux",
   "groups": {
     "parse": {
-      "test_list_workspace_projects_nocache[composers-10]": 0.016421750017237738,
-      "test_list_workspace_projects_nocache[composers-50]": 0.07185380692856874,
-      "test_list_workspace_projects_nocache[composers-200]": 0.2388664538571439
+      "test_list_workspace_projects_nocache[composers-10]": 0.011127133119230019,
+      "test_list_workspace_projects_nocache[composers-50]": 0.04701202616129109,
+      "test_list_workspace_projects_nocache[composers-200]": 0.15071771933333505
     },
     "export": {
-      "test_post_export_zip[composers-10]": 0.010621589857140498,
-      "test_post_export_zip[composers-50]": 0.03968703356250458
+      "test_post_export_zip[composers-10]": 0.008332728039999467,
+      "test_post_export_zip[composers-50]": 0.032360917022727136
     },
     "search": {
-      "test_search_full_corpus_live_scan": 0.04461661563157736,
-      "test_search_full_corpus_indexed": 0.05512249660713918
+      "test_search_full_corpus_live_scan": 0.021531250218749687,
+      "test_search_full_corpus_indexed": 0.02971709334782733
     },
     "summary-cache": {
-      "test_summary_cache_lookup[hit]": 7.249851343825762e-05,
-      "test_summary_cache_lookup[miss]": 7.193702095574013e-05,
-      "test_composer_map_cache_lookup[hit]": 7.151645086519804e-05,
-      "test_composer_map_cache_lookup[miss]": 7.112598943352091e-05,
-      "test_fingerprint_workspace_entries[10]": 0.0024127972424549185,
-      "test_fingerprint_workspace_entries[50]": 0.010196820941858245,
-      "test_fingerprint_workspace_entries[200]": 0.029070524094341035,
-      "test_summary_cache_round_trip": 0.0004703680658560554,
-      "test_tab_summary_cache_lookup[hit]": 7.844850562859133e-05,
-      "test_tab_summary_cache_lookup[miss]": 7.843399021512e-05
+      "test_summary_cache_lookup[hit]": 3.6884357594611414e-05,
+      "test_summary_cache_lookup[miss]": 3.670749401260921e-05,
+      "test_composer_map_cache_lookup[hit]": 3.647354604953973e-05,
+      "test_composer_map_cache_lookup[miss]": 3.59598104074222e-05,
+      "test_fingerprint_workspace_entries[10]": 0.0017136635127184812,
+      "test_fingerprint_workspace_entries[50]": 0.007449055283237091,
+      "test_fingerprint_workspace_entries[200]": 0.02157815813043469,
+      "test_summary_cache_round_trip": 0.0003182098200822204,
+      "test_tab_summary_cache_lookup[hit]": 4.158486279113423e-05,
+      "test_tab_summary_cache_lookup[miss]": 3.933337414450544e-05
     }
   }
 }

requirements-lock.txt

@@ -14,5 +14,5 @@ fpdf2==2.8.7              # via -r requirements.txt
 itsdangerous==2.2.0       # via flask
 jinja2==3.1.6             # via flask
 markupsafe==3.0.3         # via flask, jinja2, werkzeug
-pillow==12.2.0            # via -r requirements.txt, fpdf2
+pillow==12.3.0            # via -r requirements.txt, fpdf2
 werkzeug==3.1.8           # via flask