pex 2.20.3

---

2.20.3

This release fixes both PEX building and lock creation via
pex3 lock {create,sync} to be reproducible in more cases. Previously,
if a requirement only available in source form (an sdist, a local
project or a VCS requirement) had a build that was not reproducible due
to either file timestamps (where the SOURCE_DATE_EPOCH standard was
respected) or random iteration order (e.g.: the setup.py used sets in
certain in-opportune ways), Pex's outputs would mirror the problematic
requirement's non-reproducibility. Now Pex plumbs a fixed
SOURCE_DATE_EPOCH and PYTHONHASHSEED to all places sources are
built.

• Plumb reproducible build env vars more thoroughly. (#2554)

---

file	sha256	size
pex	0100c2e0b9e5dd56b063c98176cdd11b6064c2439d0faefdd3d25453393ed9fb	4315782
pex-linux-aarch64	a8a8199ed4ef71b439c622f39f77aa2bbb9e3f64b04abd8f9ecc0dccca0c6d48	24061034
pex-linux-x86_64	e19ad6b265327201a1c1bfdae62b9e8a9af2b26e810cf6921a0db44a9e224b5a	27707238
pex-macos-aarch64	e0eda2ed5c29d819e0b4b47ed3713b3d95ab296377a14c803430a6e96acd87fa	21567888
pex-macos-x86_64	e5d8103f07a29db384becc976d9062dc105a9386cfd6d3e1bd9cb75ad6a77e1b	22078896