Pex

Latest version: v2.33.7

Safety actively analyzes 722491 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 57

23.3.1

artifacts via re-directs, the resulting lock file would contain the
final re-directed URL instead of the originating index artifact URL.
This could lead to issues when the indexes re-direction scheme changed
or else if authentication parameters in the original index URL were
stripped in the Pip logs.

* Fix artifact URL recording for `pip>=23.3`. (2421)

3.12

__pex__` import hook.

* Eliminate warnings for default use. (2188)
* Cleanup sys.path after __pex__ is imported. (2189)

3.7

can't. To turn the need to fall back to older Pip from a warning into a
hard error you can also specify `--no-allow-pip-version-fallback`.

The `pex3 lock update` command now gains the ability to update just the
index and find links repos the lock's artifacts originate from by using
a combination of `--no-pypi`, `--index` & `--find-links` along with
`--pin` to ensure the project versions stay pinned as they are in the
lockfile and just the repos they are downloaded from is altered. Consult
the CLI `--help` for `--fingerprint-mismatch {ignore,warn,error}` to
gain more control over repo migration behavior.

There are several bug fixes as well dealing with somewhat esoteric
corner cases involving changing a PEX `--layout` from one form to
another and building artifacts using certain interpreters on macOS 11.0
(aka: 10.16).

* Add support for Pip 22.2.2. (1893)
* Make lock update sensitive to artifacts. (1887)
* Ensure locally built wheel is consumable locally. (1886)
* Ensure `--output` always overwrites destination. (1883)

2.33.7

This release fixes `PEX_TOOLS=1 ./path/to/pex` for PEXes using venv-execution and sh-bootstrapping (that is, built with `--sh-boot --venv=... --include-tools` ). Previously, the `PEX_TOOLS=1` was ignored if the venv already existed in the `PEX_ROOT` (for instance, if the PEX had already been run).

* Avoid fast-path in `--sh-boot` script when `PEX_TOOLS=1`. (2726)

2.33.6

Fix PEP-723 script metadata parsing to skip metadata blocks found in multiline strings.

* Fix PEP-723 script metadata parsing. (2722)

2.33.5

This release fixes rate limit issues building CPython Pex scies by bumping to science 0.12.2 which
is fixed to properly support bearer authentication via the `SCIENCE_AUTH_<normalized_host>_BEARER`
environment variable.

* Upgrade to `science` 0.12.2 to fix PBS rate limits. (2720)

Page 1 of 57

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.