Bump pip from 20.0.2 to 20.2

[dependabot-preview]

Bumps pip from 20.0.2 to 20.2.

Changelog

Sourced from pip's changelog.

20.2 (2020-07-29)

Deprecations and Removals

• Deprecate setup.py-based builds that do not generate an .egg-info directory. (#6998, #8617)
• Disallow passing install-location-related arguments in --install-options. (#7309)
• Add deprecation warning for invalid requirements format "base>=1.0[extra]" (#8288)
• Deprecate legacy setup.py install when building a wheel failed for source distributions without pyproject.toml (#8368)
• Deprecate -b/--build/--build-dir/--build-directory. Its current behaviour is confusing and breaks in case different versions of the same distribution need to be built during the resolution process. Using the TMPDIR/TEMP/TMP environment variable, possibly combined with --no-clean covers known use cases. (#8372)
• Remove undocumented and deprecated option --always-unzip (#8408)

Features

• Log debugging information about pip, in pip install --verbose. (#3166)

• Refine error messages to avoid showing Python tracebacks when an HTTP error occurs. (#5380)

• Install wheel files directly instead of extracting them to a temp directory. (#6030)

• Add a beta version of pip's next-generation dependency resolver.

  Move pip's new resolver into beta, remove the --unstable-feature=resolver flag, and enable the --use-feature=2020-resolver flag. The new resolver is significantly stricter and more consistent when it receives incompatible instructions, and reduces support for certain kinds of Constraints Files, so some workarounds and workflows may break. More details about how to test and migrate, and how to report issues, at Resolver changes 2020 . Maintainers are preparing to release pip 20.3, with the new resolver on by default, in October. (#6536)

• Add a subcommand debug to pip config to list available configuration sources and the key-value pairs defined in them. (#6741)

• Warn if index pages have unexpected content-type (#6754)

• Allow specifying --prefer-binary option in a requirements file (#7693)

• Generate PEP 376 REQUESTED metadata for user supplied requirements installed by pip. (#7811)

• Warn if package url is a vcs or an archive url with invalid scheme (#8128)

• Parallelize network operations in pip list. (#8504)

• Allow the new resolver to obtain dependency information through wheels lazily downloaded using HTTP range requests. To enable this feature, invoke pip with --use-feature=fast-deps. (#8588)

• Support --use-feature in requirements files (#8601)

Bug Fixes

• Use canonical package names while looking up already installed packages. (#5021)
• Fix normalizing path on Windows when installing package on another logical disk. (#7625)
• The VCS commands run by pip as subprocesses don't merge stdout and stderr anymore, improving the output parsing by subsequent commands. (#7968)
• Correctly treat non-ASCII entry point declarations in wheels so they can be installed on Windows. (#8342)
• Update author email in config and tests to reflect decommissioning of pypa-dev list. (#8454)
• Headers provided by wheels in .data directories are now correctly installed into the user-provided locations, such as --prefix, instead of the virtual environment pip is running in. (#8521)

Vendored Libraries

• Vendored htmlib5 no longer imports deprecated xml.etree.cElementTree on Python 3.
• Upgrade appdirs to 1.4.4
• Upgrade certifi to 2020.6.20
• Upgrade distlib to 0.3.1
• Upgrade html5lib to 1.1
• Upgrade idna to 2.10

Commits

• 127acd8 Bump for release
• 20dc509 Update AUTHORS.txt
• 5160a25 Merge pull request #8491 from brainwane/testing-guide-beta
• 66d39f9 Clarify on conflicts and multiplicity
• 263f85b formatting fix
• ec73620 formatting
• d374b0d Add changelog entry
• 1e5e544 Ref links and followup tips
• 223e379 WIP formatting
• 6bfbce0 WIP adding links to issues
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[coveralls]

Coverage remained the same at 42.065% when pulling e4fe420 on dependabot/pip/pip-20.2 into 10a4d82 on master.

[dependabot-preview]

Superseded by #460.