docs: Update 1.18.2 changelog for promptflow{,-devkit} (#4069)

# Description

Please add an informative description that covers that changes made by
the pull request and link all relevant issues.

# All Promptflow Contribution checklist:
- [ ] **The pull request does not introduce [breaking changes].**
- [ ] **CHANGELOG is updated for new features, bug fixes or other
significant changes.**
- [ ] **I have read the [contribution
guidelines](https://github.com/microsoft/promptflow/blob/main/CONTRIBUTING.md).**
- [ ] **I confirm that all new dependencies are compatible with the MIT
license.**
- [ ] **Create an issue and link to the pull request to get dedicated
review from promptflow team. Learn more: [suggested
workflow](../CONTRIBUTING.md#suggested-workflow).**

## General Guidelines and Best Practices
- [ ] Title of the pull request is clear and informative.
- [ ] There are a small number of commits, each of which have an
informative message. This means that previously merged commits do not
appear in the history of the PR. For more information on cleaning up the
commits in your PR, [see this
page](https://github.com/Azure/azure-powershell/blob/master/documentation/development-docs/cleaning-up-commits.md).

### Testing Guidelines
- [ ] Pull request includes test coverage for the included changes.

Author: kdestin

src/promptflow-devkit/CHANGELOG.md

@@ -1,5 +1,11 @@
 # promptflow-devkit package
 
+## v1.18.2 (Unreleased)
+
+### Improvements
+
+- Pillow library dependency range updated to <=11.3.0
+
 ## v1.18.0 (2025.6.10)
 
 ### Bugs fixed

src/promptflow/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Release History
 
+## v1.18.2 (Unreleased)
+
+### Improvements
+
+- Pin starlette to 0.49.*
+
+### Bugs fixed
+
+- Added some mitigations against SSRF possible when the executor service invokes `create_image_from_url`
 
 ## v1.18.1 (2025.6.10)