Pex

Latest version: v2.33.7

Safety actively analyzes 723177 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 57

2.27.1

This release fixes a bug in `PEX_ROOT` handling that could manifest
with symlinked `HOME` dirs or more generally symlinked dirs being
parents of the `PEX_ROOT`. Although this was claimed to be fixed in
the Pex 2.20.4 release by 2574, there was one missing case not handled.

* Ensure that the `PEX_ROOT` is always a realpath. (2626)

2.27.0

This release adds a Pex PEX scie for armv7l.

* Add a Pex PEX scie for armv7l. (2624)

2.26.0

This release adds Pex `--scie {eager,lazy}` support for Linux armv7l.

In addition, a spurious warning when using `PEX_PYTHON=pythonX.Y`
against a venv PEX has been fixed.

* Added support for armv7l (2620)
* Fix incorrect regex for `PEX_PYTHON` precision warning (2622)

2.25.2

This release fixes the `--elide-unused-requires-dist` lock option once
again. The fix in 2.25.1 could lead to locked requirements having only
a partial graph of extras which would allow a subsequent subset of those
partial extras to silently resolve an incomplete set of dependencies.

In addition, the Pex REPL for PEXes without entry points or else when
forced with `PEX_INTERPRETER=1` is now fixed such that readline support
always works. Previously, the yellow foreground color applied to the PS1
and PS2 prompts would interfere with the tracked cursor position in some
Pythons; so the yellow foreground color for those prompts is now
dropped.

* Fix `--elide-unused-requires-dist`: don't expose partial extras. (2618)
* Fix Pex REPL prompt. (2617)

2.25.1

This is a hotfix release that fixes a bug in the implementation of the
`--elide-unused-requires-dist` lock option introduced in Pex 2.25.0.

* Fix `--elide-unused-requires-dist` for unactivated deps. (2615)

2.25.0

This release adds support for
`pex3 lock {create,sync} --elide-unused-requires-dist`. This new lock
option causes any dependencies of a locked requirement that can never
be activated to be elided from the lock file. This leads to no material
difference in lock file use, but it does cut down on the lock file size.

* Add `--elide-unused-requires-dist` lock option. (2613)

Page 4 of 57

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.