chore(deps): update dependency pex to v2.90.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pex (changelog)	2.90.1 → 2.90.3

---

Release Notes

pex-tool/pex (pex)

v2.90.3

Compare Source

This release follows up on #​3109 in 2.90.2 and extends better isolation to --venv script shebangs
when emitting hermetic scripts (the default; only subverted by --non-hermetic-venv-scripts).

• Use more isolation in venv scripts when available. (#​3110)

v2.90.2

Compare Source

This release fixes bugs resulting from imperfect isolation of Python interpreters by Pex. In
particular, sys.path pollution from items in the CWD is mitigated for many common use cases.

This release also updates vendored Pip's vendored certifi's cacert.pem to that from
certifi 2026.2.25.

• Update vendored Pip's CA cert bundle. (#​3108)
• Further isolate Python interpreters when possible. (#​3109)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.