Bump pex from 1.6.11 to 2.0.3

[dependabot-preview]

Bumps pex from 1.6.11 to 2.0.3.

Release notes

Sourced from pex's releases.

pex 2.0.3

---

2.0.3

This release fixes a regression in handling explicitly requested --index or
--find-links http (insecure) repos. In addition, performance of the pex 2.x
resolver is brought in line with the 1.x resolver in all cases and improved in
most cases.

• Unify PEX buildtime and runtime wheel caches. #821
  PR [#821](https://github-redirect.dependabot.com/pantsbuild/pex/issues/821) <https://github-redirect.dependabot.com/pantsbuild/pex/pull/821>_

• Parallelize resolve. (#819)
  PR [#819](https://github-redirect.dependabot.com/pantsbuild/pex/issues/819) <https://github-redirect.dependabot.com/pantsbuild/pex/pull/819>_

• Use the resolve cache to skip installs. (#815)
  PR [#815](https://github-redirect.dependabot.com/pantsbuild/pex/issues/815) <https://github-redirect.dependabot.com/pantsbuild/pex/pull/815>_

• Implicitly trust explicitly requested repos. (#813)
  PR [#813](https://github-redirect.dependabot.com/pantsbuild/pex/issues/813) <https://github-redirect.dependabot.com/pantsbuild/pex/pull/813>_

pex 2.0.2

---

2.0.2

This is a hotfix release that fixes a bug exposed when Pex was asked to use an
interpreter with a non-canonical path as well as fixes for 'current' platform
handling in the resolver API.

• Fix current platform handling. (#801)
• Add a test of pypi index rendering. (#799)
• Fix iter_compatible_interpreters path biasing. (#798)

pex 2.0.1

---

2.0.1

This is a htofix release that fixes a bug when specifying a custom index
(-i/--index/--index-url) via the CLI.

• Fix #794 issue by add missing return statement in str (#795)

pex 2.0.0

---

2.0.0

... (truncated)

Changelog

Sourced from pex's changelog.

2.0.3

This release fixes a regression in handling explicitly requested --index or --find-links http (insecure) repos. In addition, performance of the pex 2.x resolver is brought in line with the 1.x resolver in all cases and improved in most cases.

• Unify PEX buildtime and runtime wheel caches. #821 [PR #821](https://github-redirect.dependabot.com/pantsbuild/pex/pull/821)
• Parallelize resolve. (#819) [PR #819](https://github-redirect.dependabot.com/pantsbuild/pex/pull/819)
• Use the resolve cache to skip installs. (#815) [PR #815](https://github-redirect.dependabot.com/pantsbuild/pex/pull/815)
• Implicitly trust explicitly requested repos. (#813) [PR #813](https://github-redirect.dependabot.com/pantsbuild/pex/pull/813)

2.0.2

This is a hotfix release that fixes a bug exposed when Pex was asked to use an interpreter with a non-canonical path as well as fixes for 'current' platform handling in the resolver API.

• Fix current platform handling. (#801) [PR #801](https://github-redirect.dependabot.com/pantsbuild/pex/pull/801)
• Add a test of pypi index rendering. (#799) [PR #799](https://github-redirect.dependabot.com/pantsbuild/pex/pull/799)
• Fix iter_compatible_interpreters path biasing. (#798) [PR #798](https://github-redirect.dependabot.com/pantsbuild/pex/pull/798)

2.0.1

This is a htofix release that fixes a bug when specifying a custom index (-i/--index/--index-url) via the CLI.

• Fix #794 issue by add missing return statement in __str__ (#795) [PR #795](https://github-redirect.dependabot.com/pantsbuild/pex/pull/795)

2.0.0

Pex 2.0.0 is cut on the advent of a large, mostly internal change for typical use cases: it now uses vendored pip to perform resolves and wheel builds. This fixes a large number of compatibility and correctness bugs as well as gaining feature support from pip including handling manylinux2010 and manylinux2014 as well as VCS requirements and support for PEP-517 & PEP-518 builds.

API changes to be wary of:

• The egg distribution format is no longer supported.
• The deprecated --interpreter-cache-dir CLI option was removed.
• The --cache-ttl CLI option and cache_ttl resolver API argument were removed.
• The resolver API replaced fetchers with a list of indexes and a list of find_links repos.
• The resolver API removed (http) context which is now automatically handled.
• The resolver API removed precedence which is now pip default precedence: wheels when available and not ruled out via the --no-wheel CLI option or use_wheel=False API argument.
• The --platform CLI option and platform resolver API argument now must be full platform strings that include platform, implementation, version and abi; e.g.: --platform=macosx-10.13-x86_64-cp-36-m.
• The --manylinux CLI option and use_manylinux resolver API argument were removed. Instead, to resolve manylinux wheels for a foreign platform, specify the manylinux platform to target with an explicit --platform CLI flag or platform resolver API argument; e.g.: --platform=manylinux2010-x86_64-cp-36-m.

In addition, Pex 2.0.0 now builds reproduceable pexes by default; ie:

• Python modules embedded in the pex are not pre-compiled (pass --compile if you want this).
• The timestamps for Pex file zip entries default to midnight on January 1, 1980 (pass --use-system-time to change this).

This finishes off the effort tracked by [Issue #716](https://github-redirect.dependabot.com/pantsbuild/pex/pull/718)

Changes in this release:

... (truncated)

Commits

• 6b3e12a Prepare the 2.0.3 release. (#822)
• 66aa5ef Unify PEX buildtime and runtime wheel caches. (#821)
• f796e00 Parallelize resolve. (#819)
• 5b8a9b4 Use the resolve cache to skip installs. (#815)
• a641fd7 Implicitly trust explicitly requested repos. (#813)
• e4ac0e3 Fix tests/test_integration.py. (#808)
• cf0a941 Prepare the 2.0.2 release. (#804)
• 5fe0bc0 Fix current platform handling. (#801)
• 3092325 Add a test of pypi index rendering. (#799)
• 28f6f6a Fix iter_compatible_interpreters path biasing. (#798)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If all status checks pass Dependabot will automatically merge this pull request.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[codecov-io]

Codecov Report

Merging #121 into master will decrease coverage by 2.7%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #121      +/-   ##
==========================================
- Coverage   94.59%   91.89%   -2.71%     
==========================================
  Files           2        2              
  Lines          37       37              
  Branches        5        5              
==========================================
- Hits           35       34       -1     
- Misses          1        2       +1     
  Partials        1        1

Impacted Files	Coverage Δ
tests/test_mario_addons.py	89.28% <0%> (-3.58%)	⬇️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 003d01f...f27606c. Read the comment docs.

[dependabot-preview]

One of your CI runs failed on this pull request, so Dependabot won't merge it.

• Travis CI - Pull Request
• Travis CI - Branch

Dependabot will still automatically merge this pull request if you amend it and your tests pass.

[dependabot-preview]

Superseded by #125.