chore(deps): update dependency pex to v2.33.7

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
pex (changelog)	2.28.1 -> 2.33.7

---

Release Notes

pex-tool/pex (pex)

v2.33.7

Compare Source

This release fixes PEX_TOOLS=1 ./path/to/pex for PEXes using venv-execution and sh-bootstrapping (that is, built with --sh-boot --venv=... --include-tools ). Previously, the PEX_TOOLS=1 was ignored if the venv already existed in the PEX_ROOT (for instance, if the PEX had already been run).

• Avoid fast-path in --sh-boot script when PEX_TOOLS=1. (#​2726)

v2.33.6

Compare Source

Fix PEP-723 script metadata parsing to skip metadata blocks found in multiline strings.

• Fix PEP-723 script metadata parsing. (#​2722)

v2.33.5

Compare Source

This release fixes rate limit issues building CPython Pex scies by bumping to science 0.12.2 which
is fixed to properly support bearer authentication via the SCIENCE_AUTH_<normalized_host>_BEARER
environment variable.

• Upgrade to science 0.12.2 to fix PBS rate limits. (#​2720)

v2.33.4

Compare Source

This release fixes PEX scies to exclude a ptex binary for --scie eager scies saving ~5MB on scies
targeting 64 bit systems.

• Do not include ptex in --scie eager scies. (#​2717)

v2.33.3

Compare Source

This release fixes Pex Zip64 support such that PEX zips do not use Zip64 extensions unless needed.
Previously, any zip between ~2GB and ~4GB that actually fell under Zip64 limits would still use
Zip64 extensions. This prevented the file from being bootable under Python before the 3.13 release
since the zipimporter was not fixed to support ZIp64 extensions until then.

The --scie-only option is fixed for the case when the -o / --output-file name does not end in
.pex. Previously there would be no scie (or PEX) output at all!

Finally, this release fixes PEX scies such that, when split, the embedded PEX is both executable and
retains the expected name as provided by -o / --output-file.

• Enable true Zip64 support. (#​2714)
• Fix --scie-only for -o not ending in .pex. (#​2715)
• Fix PEX scie contents when split. (#​2713)

v2.33.2

Compare Source

This release fixes PEXes build with root requirements like foo[bar] foo[baz] (vs. foo[bar,baz],
which worked already).

• Fix dup requirement extra merging during PEX boot. (#​2707)

v2.33.1

Compare Source

This release fixes a bug in both pex3 lock subset and
pex3 lock {create,sync,update} --elide-unused-requires-dist for --style universal locks whose
locked requirements have dependencies de-selected by the following environment markers:

• os_name
• platform_system
• sys_platform
• python_version
• python_full_version

The first three could lead to errors when the universal lock was generated with --target-systems
and the last two could lead to errors when the universal lock was generated with
--interpreter-constraint.

• Fix pex3 lock subset. (#​2684)

v2.33.0

Compare Source

This release adds support for Pip 25.0.1.

• Add support for --pip-version 25.0.1. (#​2671)

v2.32.1

Compare Source

This release fixes a long-standing bug handling development versions of
CPython (any non-tagged release of the interpreter). These interpreters
report a full version of X.Y.Z+ and the trailing + leads to a non
PEP-440 compliant version number. This, in turn, causes issues with the
packaging library leading to failures to evaluate markers for these
interpreters which surface as inscrutable Pex errors.

• Fix support for CPython development releases. (#​2655)

v2.32.0

Compare Source

This release adds support for Pip 25.0.

• Add support for --pip-version 25.0. (#​2652)

v2.31.0

Compare Source

This release adds pex3 lock subset <reqs...> --lock existing.lock for
creating a subset of an existing lock file. This is a fast operation
that just trims un-used locked requirements from the lock but otherwise
leaves the lock unchanged.

• Add support for pex3 lock subset. (#​2647)

v2.30.0

Compare Source

This release brings --sh-boot support to PEXes with
--layout {loose,packed}. Previously, the --sh-boot option only took
effect for traditional PEX zip files. Now all PEX output and runtime
schemes, in any combination, can benefit from the reduced boot latency
--sh-boot brings on all runs of a PEX after the first.

• Support --sh-boot for --layout {loose,packed}. (#​2645)

v2.29.0

Compare Source

This release brings 1st class support for newer Pip's
--keyring-provider option. Previously you could only use keyring
based authentication via --use-pip-config and either the
PIP_KEYRING_PROVIDER environment variable or Pip config files.
Although using --keyring-provider import is generally unusable in the
face of Pex hermeticity strictures, --keyring-provider subprocess is
viable; just ensure you have a keyring provider on the PATH. You can
read more here.

This release also brings PEP-723 support to Pex locks. You
can now pass pex3 lock {create,sync,update} --exe <script> ... to
include the PEP-723 declared script requirements in the lock.

• add --keyring-provider flag to configure keyring-based authentication (#​2592)
• Support locking PEP-723 requirements. (#​2642)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.