pex 2.64.1__py2.py3-none-any.whl → 2.69.0__py2.py3-none-any.whl

pex/docs/html/whatispex.html

@@ -8,7 +8,7 @@
         <link rel="prefetch" href="_static/pex-logo-dark.png" as="image">
 
     <link rel="shortcut icon" href="_static/pex-icon.png"><!-- Generated with Sphinx 8.2.3 and Furo 2025.09.25 -->
-        <title>What are .pex files? - Pex Docs (v2.64.1)</title>
+        <title>What are .pex files? - Pex Docs (v2.69.0)</title>
       <link rel="stylesheet" type="text/css" href="_static/pygments.css?v=d111a655" />
     <link rel="stylesheet" type="text/css" href="_static/styles/furo.css?v=580074bf" />
     <link rel="stylesheet" type="text/css" href="_static/styles/furo-extensions.css?v=8dab3a3b" />
@@ -163,7 +163,7 @@
       </label>
     </div>
     <div class="header-center">
-      <a href="index.html"><div class="brand">Pex Docs (v2.64.1)</div></a>
+      <a href="index.html"><div class="brand">Pex Docs (v2.69.0)</div></a>
     </div>
     <div class="header-right">
       <div class="theme-toggle-container theme-toggle-header">
@@ -322,12 +322,12 @@ build executable .pex files.  This is described more thoroughly in
           </div>
           <div class="right-details">
             <div class="icons">
-              <a class="muted-link " href="https://pypi.org/project/pex/2.64.1/" aria-label="PyPI"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 448 512" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg">
+              <a class="muted-link " href="https://pypi.org/project/pex/2.69.0/" aria-label="PyPI"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 448 512" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg">
     <path d="M439.8 200.5c-7.7-30.9-22.3-54.2-53.4-54.2h-40.1v47.4c0 36.8-31.2 67.8-66.8 67.8H172.7c-29.2 0-53.4 25-53.4 54.3v101.8c0 29 25.2 46 53.4 54.3 33.8 9.9 66.3 11.7 106.8 0 26.9-7.8 53.4-23.5 53.4-54.3v-40.7H226.2v-13.6h160.2c31.1 0 42.6-21.7 53.4-54.2 11.2-33.5 10.7-65.7 0-108.6zM286.2 404c11.1 0 20.1 9.1 20.1 20.3 0 11.3-9 20.4-20.1 20.4-11 0-20.1-9.2-20.1-20.4.1-11.3 9.1-20.3 20.1-20.3zM167.8 248.1h106.8c29.7 0 53.4-24.5 53.4-54.3V91.9c0-29-24.4-50.7-53.4-55.6-35.8-5.9-74.7-5.6-106.8.1-45.2 8-53.4 24.7-53.4 55.6v40.7h106.9v13.6h-147c-31.1 0-58.3 18.7-66.8 54.2-9.8 40.7-10.2 66.1 0 108.6 7.6 31.6 25.7 54.2 56.8 54.2H101v-48.8c0-35.3 30.5-66.4 66.8-66.4zm-6.7-142.6c-11.1 0-20.1-9.1-20.1-20.3.1-11.3 9-20.4 20.1-20.4 11 0 20.1 9.2 20.1 20.4s-9 20.3-20.1 20.3z">
     </path>
 </svg>
 </a>
-              <a class="muted-link " href="https://github.com/pex-tool/pex/releases/download/v2.64.1/pex" aria-label="Download"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 640 512" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg">
+              <a class="muted-link " href="https://github.com/pex-tool/pex/releases/download/v2.69.0/pex" aria-label="Download"><svg stroke="currentColor" fill="currentColor" stroke-width="0" viewBox="0 0 640 512" height="1em" width="1em" xmlns="http://www.w3.org/2000/svg">
     <path d="M537.6 226.6c4.1-10.7 6.4-22.4 6.4-34.6 0-53-43-96-96-96-19.7 0-38.1 6-53.3 16.2C367 64.2 315.3 32 256 32c-88.4 0-160 71.6-160 160 0 2.7.1 5.4.2 8.1C40.2 219.8 0 273.2 0 336c0 79.5 64.5 144 144 144h368c70.7 0 128-57.3 128-128 0-61.9-44-113.6-102.4-125.4zm-132.9 88.7L299.3 420.7c-6.2 6.2-16.4 6.2-22.6 0L171.3 315.3c-10.1-10.1-2.9-27.3 11.3-27.3H248V176c0-8.8 7.2-16 16-16h48c8.8 0 16 7.2 16 16v112h65.4c14.2 0 21.4 17.2 11.3 27.3z">
     </path>
 </svg>
@@ -371,7 +371,7 @@ build executable .pex files.  This is described more thoroughly in
       
     </aside>
   </div>
-</div><script src="_static/documentation_options.js?v=a39c154c"></script>
+</div><script src="_static/documentation_options.js?v=525daa63"></script>
     <script src="_static/doctools.js?v=9bcbadda"></script>
     <script src="_static/sphinx_highlight.js?v=dc90522c"></script>
     <script src="_static/scripts/furo.js?v=46bd48cc"></script>

pex/hashing.py

@@ -1,7 +1,7 @@
 # Copyright 2022 Pex project contributors.
 # Licensed under the Apache License, Version 2.0 (see LICENSE).
 
-from __future__ import absolute_import
+from __future__ import absolute_import, print_function
 
 import hashlib
 import os
@@ -241,10 +241,12 @@ def dir_hash(
         def iter_files():
             # type: () -> Iterator[Text]
             for root, dirs, files in os.walk(top, followlinks=True):
-                dirs[:] = [d for d in dirs if dir_filter(os.path.join(root, d))]
+                dirs[:] = [
+                    d for d in dirs if dir_filter(os.path.relpath(os.path.join(root, d), top))
+                ]
                 for f in files:
                     path = os.path.join(root, f)
-                    if file_filter(path):
+                    if file_filter(os.path.relpath(path, top)):
                         yield path
 
         file_paths = sorted(iter_files())
@@ -278,16 +280,26 @@ def zip_hash(
             else zf.namelist()
         )
 
-        dirs = frozenset(name.rstrip("/") for name in namelist if name.endswith("/"))
-        accept_dirs = frozenset(d for d in dirs if dir_filter(os.path.basename(d)))
-        reject_dirs = dirs - accept_dirs
-
+        dirs = set()
+        for name in namelist:
+            if name.endswith("/"):
+                dirname = name.rstrip("/")
+            else:
+                dirname = os.path.dirname(name)
+            while dirname:
+                dirs.add(dirname)
+                dirname = os.path.dirname(dirname)
+
+        accept_dirs = frozenset(
+            d for d in dirs if dir_filter(os.path.relpath(d, relpath) if relpath else d)
+        )
+        reject_dirs = tuple("{dir}/".format(dir=path) for path in (dirs - accept_dirs))
         accept_files = sorted(
             name
             for name in namelist
             if not name.endswith("/")
-            and not any(name.startswith(reject_dir) for reject_dir in reject_dirs)
-            and file_filter(os.path.basename(name))
+            and not name.startswith(reject_dirs)
+            and file_filter(os.path.relpath(name, relpath) if relpath else name)
         )
 
         hashed_names = (
@@ -297,3 +309,53 @@ def zip_hash(
 
         for filename in accept_files:
             update_hash(zf.open(filename, "r"), digest)
+
+
+if __name__ == "__main__":
+    import sys
+    import zipfile
+    from argparse import ArgumentParser
+
+    from pex.common import is_pyc_dir, is_pyc_file
+
+    parser = ArgumentParser()
+    parser.add_argument(
+        "--exclude-dir",
+        dest="exclude_dirs",
+        action="append",
+        default=[],
+    )
+    parser.add_argument("--zip-relpath")
+    parser.add_argument("paths", nargs="+")
+
+    options = parser.parse_args()
+    exclude_dirs = frozenset(options.exclude_dirs)
+
+    for path in options.paths:
+        digest = Sha256()
+        if zipfile.is_zipfile(path):
+            zip_hash(
+                path,
+                digest=digest,
+                relpath=options.zip_relpath,
+                dir_filter=(
+                    lambda dir_path: (
+                        not is_pyc_dir(dir_path) and os.path.basename(dir_path) not in exclude_dirs
+                    )
+                ),
+                file_filter=lambda f: not is_pyc_file(f),
+            )
+        elif os.path.isdir(path):
+            dir_hash(
+                path,
+                digest=digest,
+                dir_filter=(
+                    lambda dir_path: (
+                        not is_pyc_dir(dir_path) and os.path.basename(dir_path) not in exclude_dirs
+                    )
+                ),
+                file_filter=lambda f: not is_pyc_file(f),
+            )
+        else:
+            print("Can only hash zip files or directories. Skipping file", path, file=sys.stderr)
+        print(path, digest.hexdigest(), file=sys.stdout)

pex/interpreter_constraints.py

@@ -375,7 +375,7 @@ COMPATIBLE_PYTHON_VERSIONS = (
     PythonVersion(Lifecycle.EOL, 3, 6, 15),
     PythonVersion(Lifecycle.EOL, 3, 7, 17),
     PythonVersion(Lifecycle.EOL, 3, 8, 20),
-    PythonVersion(Lifecycle.STABLE, 3, 9, 24),
+    PythonVersion(Lifecycle.EOL, 3, 9, 25),
     PythonVersion(Lifecycle.STABLE, 3, 10, 19),
     PythonVersion(Lifecycle.STABLE, 3, 11, 14),
     PythonVersion(Lifecycle.STABLE, 3, 12, 12),

pex/jobs.py

@@ -724,6 +724,19 @@ def iter_map_parallel(
     if not input_items:
         return
 
+    # We want each of the job slots to process MULTIPROCESSING_DEFAULT_MIN_AVERAGE_LOAD on
+    # average in order to overcome multiprocessing overheads. If we don't need at least 2 slots, we
+    # are unlikely to get any boost from multiprocessing.
+    needed_slots = len(input_items) // min_average_load
+    if needed_slots < 2:
+        for item in input_items:
+            yield function(item)
+        return
+
+    # Of course, if there are fewer available cores than that or the user has pinned max jobs lower,
+    # we clamp to that.
+    pool_size = min(needed_slots, _sanitize_max_jobs(max_jobs))
+
     if costing_function is not None:
         # We ensure no job slot is so unlucky as to get all the biggest jobs and thus become an
         # un-necessarily long pole by sorting based on cost. Some examples to illustrate the effect
@@ -740,12 +753,6 @@ def iter_map_parallel(
         #
         input_items.sort(key=costing_function, reverse=True)
 
-    # We want each of the job slots above to process MULTIPROCESSING_DEFAULT_MIN_AVERAGE_LOAD on
-    # average in order to overcome multiprocessing overheads. Of course, if there are fewer
-    # available cores than that or the user has pinned max jobs lower, we clamp to that. Finally, we
-    # always want at least two slots to ensure we process input items in parallel.
-    pool_size = max(2, min(len(input_items) // min_average_load, _sanitize_max_jobs(max_jobs)))
-
     apply_function = functools.partial(_apply_function, function)
 
     slots = defaultdict(list)  # type: DefaultDict[int, List[float]]

pex/pep_376.py

@@ -78,6 +78,14 @@ class InstalledFile(object):
     size = attr.ib(default=None)  # type: Optional[int]
 
 
+@attr.s(frozen=True)
+class InstalledDirectory(object):
+    # N.B.: Although directory entries should not exist in a RECORD, they have been seen in the
+    # wild; so we're forced to deal with them. See: https://github.com/pex-tool/pex/issues/2998
+
+    dir_info = attr.ib()  # type: InstalledFile
+
+
 def create_installed_file(
     path,  # type: Text
     dest_dir,  # type: str
@@ -121,18 +129,21 @@ class Record(object):
     def write_fp(
         cls,
         fp,  # type: IO
-        installed_files,  # type: Iterable[InstalledFile]
+        installed_files,  # type: Iterable[Union[InstalledFile, InstalledDirectory]]
         eol="\n",  # type: str
     ):
         # type: (...) -> None
         csv_writer = csv.writer(fp, delimiter=",", quotechar='"', lineterminator=eol)
         for installed_file in installed_files:
-            csv_writer.writerow(attr.astuple(installed_file, recurse=False))
+            if isinstance(installed_file, InstalledDirectory):
+                csv_writer.writerow(attr.astuple(installed_file.dir_info, recurse=False))
+            else:
+                csv_writer.writerow(attr.astuple(installed_file, recurse=False))
 
     @classmethod
     def write_bytes(
         cls,
-        installed_files,  # type: Iterable[InstalledFile]
+        installed_files,  # type: Iterable[Union[InstalledFile, InstalledDirectory]]
         eol="\n",  # type: str
     ):
         # type: (...) -> bytes
@@ -149,7 +160,7 @@ class Record(object):
     def write(
         cls,
         dst,  # type: Text
-        installed_files,  # type: Iterable[InstalledFile]
+        installed_files,  # type: Iterable[Union[InstalledFile, InstalledDirectory]]
         eol="\n",  # type: str
     ):
         # type: (...) -> None
@@ -165,7 +176,7 @@ class Record(object):
         lines,  # type: Union[FileInput[Text], Iterator[Text]]
         exclude=None,  # type: Optional[Callable[[Text], bool]]
     ):
-        # type: (...) -> Iterator[InstalledFile]
+        # type: (...) -> Iterator[Union[InstalledFile, InstalledDirectory]]
 
         # The RECORD is a csv file with the path to each installed file in the 1st column.
         # See: https://peps.python.org/pep-0376/#record
@@ -177,7 +188,11 @@ class Record(object):
                 continue
             file_hash = Hash(fingerprint) if fingerprint else None
             size = int(file_size) if file_size else None
-            yield InstalledFile(path=path, hash=file_hash, size=size)
+            installed_file = InstalledFile(path=path, hash=file_hash, size=size)
+            if path.endswith("/"):
+                yield InstalledDirectory(dir_info=installed_file)
+            else:
+                yield installed_file
 
     project_name = attr.ib()  # type: str
     version = attr.ib()  # type: str

pex/pep_427.py

@@ -36,7 +36,7 @@ from pex.exceptions import production_assert, reportable_unexpected_error_msg
 from pex.executables import chmod_plus_x, is_python_script
 from pex.installed_wheel import InstalledWheel
 from pex.interpreter import PythonInterpreter
-from pex.pep_376 import InstalledFile, Record, create_installed_file
+from pex.pep_376 import InstalledDirectory, InstalledFile, Record, create_installed_file
 from pex.pep_440 import Version
 from pex.pep_503 import ProjectName
 from pex.sysconfig import SCRIPT_DIR, SysPlatform
@@ -775,11 +775,24 @@ def create_whl(
                 )
         else:
             for installed_file in Record.read(lines=iter(record_data.decode("utf-8").splitlines())):
-                src = os.path.join(whl_chroot, installed_file.path)
+                path = (
+                    installed_file.dir_info.path
+                    if isinstance(installed_file, InstalledDirectory)
+                    else installed_file.path
+                )
+                src = os.path.join(whl_chroot, path)
+                if not os.path.exists(src):
+                    production_assert(
+                        isinstance(installed_file, InstalledDirectory),
+                        "The wheel entry {filename} is unexpectedly missing from {source}.",
+                        filename=path,
+                        source=wheel_to_create.source,
+                    )
+                    safe_mkdir(src)
                 if use_system_time:
-                    zip_fp.write(src, installed_file.path)
+                    zip_fp.write(src, path)
                 else:
-                    zip_fp.write_deterministic(src, installed_file.path)
+                    zip_fp.write_deterministic(src, path)
     return wheel_path
 
 
@@ -869,7 +882,11 @@ def install_wheel(
             eol = "\r\n" if record_lines[0].endswith("\r\n") else "\n"
 
         if not record_data or any(
-            os.path.isabs(installed_file.path)
+            os.path.isabs(
+                installed_file.dir_info.path
+                if isinstance(installed_file, InstalledDirectory)
+                else installed_file.path
+            )
             for installed_file in Record.read(lines=iter(record_lines))
         ):
             prefix = "The RECORD in {whl}".format(whl=os.path.basename(whl))
@@ -935,10 +952,15 @@ def install_wheel(
     requested_relpath = wheel.metadata_path("REQUESTED")
     zip_metadata_relpath = wheel.pex_metadata_path(ZipMetadata.FILENAME)
 
-    installed_files = []  # type: List[InstalledFile]
+    installed_files = []  # type: List[Union[InstalledFile, InstalledDirectory]]
     provenance = []  # type: List[Tuple[Text, Text]]
     symlinked = set()  # type: Set[Text]
-    for installed_file in Record.read(lines=iter(record_data.decode("utf-8").splitlines())):
+    for installed_file_or_dir in Record.read(lines=iter(record_data.decode("utf-8").splitlines())):
+        if isinstance(installed_file_or_dir, InstalledDirectory):
+            installed_files.append(installed_file_or_dir)
+            continue
+
+        installed_file = installed_file_or_dir
         if installed_file.path == record_relpath:
             record_eol = _detect_record_eol(os.path.join(wheel.location, installed_file.path))
             installed_files.append(InstalledFile(path=record_relpath, hash=None, size=None))
@@ -1051,7 +1073,7 @@ def install_wheel(
         py_files = [
             os.path.join(dest, installed_file.path)
             for installed_file in installed_files
-            if installed_file.path.endswith(".py")
+            if isinstance(installed_file, InstalledFile) and installed_file.path.endswith(".py")
         ]
         process = subprocess.Popen(
             args=args + py_files, stdout=subprocess.PIPE, stderr=subprocess.PIPE

pex/pex_builder.py

@@ -470,10 +470,7 @@ class PEXBuilder(object):
     def _prepare_code(self):
         chroot_path = self._chroot.path()
         self._pex_info.code_hash = CacheHelper.pex_code_hash(
-            chroot_path,
-            exclude_dirs=tuple(
-                os.path.join(chroot_path, d) for d in (layout.BOOTSTRAP_DIR, layout.DEPS_DIR)
-            ),
+            chroot_path, exclude_dirs=(layout.BOOTSTRAP_DIR, layout.DEPS_DIR)
         )
         self._pex_info.pex_hash = hashlib.sha1(self._pex_info.dump().encode("utf-8")).hexdigest()
         self._chroot.write(self._pex_info.dump().encode("utf-8"), PexInfo.PATH, label="manifest")

pex/pip/local_project.py

@@ -4,9 +4,8 @@
 from __future__ import absolute_import
 
 import os.path
-import tarfile
 
-from pex import hashing
+from pex import hashing, sdist
 from pex.build_system import pep_517
 from pex.common import temporary_dir
 from pex.pip.version import PipVersionValue
@@ -33,25 +32,18 @@ def digest_local_project(
     # type: (...) -> Union[str, Error]
     with TRACER.timed("Fingerprinting local project at {directory}".format(directory=directory)):
         with temporary_dir() as td:
-            sdist_or_error = pep_517.build_sdist(
+            sdist_path_or_error = pep_517.build_sdist(
                 project_directory=directory,
                 dist_dir=os.path.join(td, "dists"),
                 pip_version=pip_version,
                 target=target,
                 resolver=resolver,
             )
-            if isinstance(sdist_or_error, Error):
-                return sdist_or_error
-            sdist = sdist_or_error
+            if isinstance(sdist_path_or_error, Error):
+                return sdist_path_or_error
+            sdist_path = sdist_path_or_error
 
             extract_dir = dest_dir or os.path.join(td, "extracted")
-            with tarfile.open(sdist) as tf:
-                tf.extractall(extract_dir)
-            listing = os.listdir(extract_dir)
-            assert len(listing) == 1, (
-                "Expected sdist generated for {directory} to contain one top-level directory, "
-                "found:\n{listing}".format(directory=directory, listing="\n".join(listing))
-            )
-            project_dir = os.path.join(extract_dir, listing[0])
+            project_dir = sdist.extract_tarball(sdist_path, dest_dir=extract_dir)
             hashing.dir_hash(directory=project_dir, digest=digest)
             return os.path.join(extract_dir, project_dir)

pex/pip/tool.py

@@ -552,8 +552,7 @@ class Pip(object):
         )
         return Job(command=command, process=process, finalizer=finalizer, context="pip")
 
-    @staticmethod
-    def _iter_build_configuration_options(build_configuration):
+    def _iter_build_configuration_options(self, build_configuration):
         # type: (BuildConfiguration) -> Iterator[str]
 
         # N.B.: BuildConfiguration maintains invariants that ensure --only-binary, --no-binary,
@@ -576,7 +575,8 @@ class Pip(object):
         if build_configuration.prefer_older_binary:
             yield "--prefer-binary"
 
-        if build_configuration.use_pep517 is not None:
+        # N.B.: In 25.3 `--use-pep517` became the default and only option.
+        if build_configuration.use_pep517 is not None and self.version < PipVersion.v25_3:
             yield "--use-pep517" if build_configuration.use_pep517 else "--no-use-pep517"
 
         if not build_configuration.build_isolation:

pex/pip/vcs.py

@@ -3,26 +3,42 @@
 
 from __future__ import absolute_import
 
-import glob
 import os
 import re
 
 from pex import hashing
 from pex.artifact_url import VCS, Fingerprint
-from pex.common import is_pyc_dir, is_pyc_file, open_zip, temporary_dir
+from pex.common import is_pyc_dir, is_pyc_file
+from pex.exceptions import reportable_unexpected_error_msg
 from pex.hashing import Sha256
 from pex.pep_440 import Version
 from pex.pep_503 import ProjectName
 from pex.result import Error, try_
-from pex.tracer import TRACER
 from pex.typing import TYPE_CHECKING
 
 if TYPE_CHECKING:
-    from typing import Optional, Tuple, Union
+    # N.B.: The `re.Pattern` type is not available in all Python versions Pex supports.
+    from re import Pattern  # type: ignore[attr-defined]
+    from typing import Callable, Optional, Text, Tuple, Union
 
     from pex.hashing import HintedDigest
 
 
+def _project_name_re(project_name):
+    # type: (ProjectName) -> str
+    return project_name.normalized.replace("-", "[-_.]+")
+
+
+def _built_source_dist_pattern(project_name):
+    # type: (ProjectName) -> Pattern
+    return re.compile(
+        r"(?P<project_name>{project_name_re})-(?P<version>.+)\.zip".format(
+            project_name_re=_project_name_re(project_name)
+        ),
+        re.IGNORECASE,
+    )
+
+
 def _find_built_source_dist(
     build_dir,  # type: str
     project_name,  # type: ProjectName
@@ -34,12 +50,7 @@ def _find_built_source_dist(
     # encoded in: `pip._internal.req.req_install.InstallRequirement.archive`.
 
     listing = os.listdir(build_dir)
-    pattern = re.compile(
-        r"{project_name}-(?P<version>.+)\.zip".format(
-            project_name=project_name.normalized.replace("-", "[-_.]+")
-        ),
-        re.IGNORECASE,
-    )
+    pattern = _built_source_dist_pattern(project_name)
     for name in listing:
         match = pattern.match(name)
         if match and Version(match.group("version")) == version:
@@ -58,23 +69,66 @@ def _find_built_source_dist(
 
 def fingerprint_downloaded_vcs_archive(
     download_dir,  # type: str
-    project_name,  # type: str
-    version,  # type: str
+    project_name,  # type: ProjectName
+    version,  # type: Version
     vcs,  # type: VCS.Value
 ):
     # type: (...) -> Tuple[Fingerprint, str]
 
     archive_path = try_(
-        _find_built_source_dist(
-            build_dir=download_dir, project_name=ProjectName(project_name), version=Version(version)
-        )
+        _find_built_source_dist(build_dir=download_dir, project_name=project_name, version=version)
     )
     digest = Sha256()
-    digest_vcs_archive(archive_path=archive_path, vcs=vcs, digest=digest)
+    digest_vcs_archive(project_name=project_name, archive_path=archive_path, vcs=vcs, digest=digest)
     return Fingerprint.from_digest(digest), archive_path
 
 
+def _vcs_dir_filter(
+    vcs,  # type: VCS.Value
+    project_name,  # type: ProjectName
+):
+    # type: (...) -> Callable[[Text], bool]
+
+    # Ignore VCS control directories for the purposes of fingerprinting the version controlled
+    # source tree. VCS control directories can contain non-reproducible content (Git at least
+    # has files that contain timestamps).
+    #
+    # We cannot prune these directories from the source archive directly unfortunately since
+    # some build processes use VCS version information to derive their version numbers (C.F.:
+    # https://pypi.org/project/setuptools-scm/). As such, we'll get a stable fingerprint, but be
+    # forced to re-build a wheel each time the VCS requirement is re-locked later, even when it
+    # hashes the same.
+    vcs_control_dir = ".{vcs}".format(vcs=vcs)
+
+    # N.B.: If the VCS project uses setuptools as its build backend, depending on the version of
+    # Pip used, the VCS checkout can have a `<project name>.egg-info/` directory littering its root
+    # left over from Pip generating project metadata to determine version and dependencies. No other
+    # well known build-backend has this problem at this time (checked hatchling, poetry-core,
+    # pdm-backend and uv_build).
+    # C.F.: https://github.com/pypa/pip/pull/13602
+    egg_info_dir_re = re.compile(
+        r"^{project_name_re}\.egg-info$".format(project_name_re=_project_name_re(project_name)),
+        re.IGNORECASE,
+    )
+
+    def vcs_dir_filter(dir_path):
+        # type: (Text) -> bool
+        if is_pyc_dir(dir_path):
+            return False
+
+        base_dir_name = dir_path.split(os.sep)[0]
+        return base_dir_name != vcs_control_dir and not egg_info_dir_re.match(base_dir_name)
+
+    return vcs_dir_filter
+
+
+def _vcs_file_filter(vcs):
+    # type: (VCS.Value) -> Callable[[Text], bool]
+    return lambda f: not is_pyc_file(f)
+
+
 def digest_vcs_archive(
+    project_name,  # type: ProjectName
     archive_path,  # type: str
     vcs,  # type: VCS.Value
     digest,  # type: HintedDigest
@@ -84,22 +138,32 @@ def digest_vcs_archive(
     # All VCS requirements are prepared as zip archives as encoded in:
     # `pip._internal.req.req_install.InstallRequirement.archive` and the archive is already offset
     # by a subdirectory (if any).
-    with TRACER.timed(
-        "Digesting {archive} {vcs} archive".format(archive=os.path.basename(archive_path), vcs=vcs)
-    ), temporary_dir() as chroot, open_zip(archive_path) as archive:
-        # TODO(John Sirois): Consider implementing zip_hash to avoid the extractall.
-        archive.extractall(chroot)
 
-        # The zip archives created by Pip have a single project name top-level directory housing
-        # the full clone. We look for that to get a consistent clone hash with a bare clone.
-        listing = glob.glob(os.path.join(chroot, "*"))
-        if len(listing) == 1 and os.path.isdir(listing[0]):
-            chroot = listing[0]
+    # The zip archives created by Pip have a single project name top-level directory housing
+    # the full clone. We look for that to get a consistent clone hash with a bare clone.
+    match = _built_source_dist_pattern(project_name).match(os.path.basename(archive_path))
+    if match is None:
+        raise AssertionError(
+            reportable_unexpected_error_msg(
+                "Failed to determine the project name prefix for the VCS zip {zip} with expected "
+                "canonical project name {project_name}".format(
+                    zip=archive_path, project_name=project_name
+                )
+            )
+        )
+    top_dir = match.group("project_name")
 
-        digest_vcs_repo(repo_path=chroot, vcs=vcs, digest=digest)
+    hashing.zip_hash(
+        zip_path=archive_path,
+        digest=digest,
+        relpath=top_dir,
+        dir_filter=_vcs_dir_filter(vcs, project_name),
+        file_filter=_vcs_file_filter(vcs),
+    )
 
 
 def digest_vcs_repo(
+    project_name,  # type: ProjectName
     repo_path,  # type: str
     vcs,  # type: VCS.Value
     digest,  # type: HintedDigest
@@ -107,24 +171,9 @@ def digest_vcs_repo(
 ):
     # type: (...) -> None
 
-    # Ignore VCS control directories for the purposes of fingerprinting the version controlled
-    # source tree. VCS control directories can contain non-reproducible content (Git at least
-    # has files that contain timestamps).
-    #
-    # We cannot prune these directories from the source archive directly unfortunately since
-    # some build processes use VCS version information to derive their version numbers (C.F.:
-    # https://pypi.org/project/setuptools-scm/). As such, we'll get a stable fingerprint, but be
-    # forced to re-build a wheel each time the VCS requirement is re-locked later, even when it
-    # hashes the same.
-    vcs_control_dir = ".{vcs}".format(vcs=vcs)
-
     hashing.dir_hash(
         directory=os.path.join(repo_path, subdirectory) if subdirectory else repo_path,
         digest=digest,
-        dir_filter=(
-            lambda dir_path: (
-                not is_pyc_dir(dir_path) and os.path.basename(dir_path) != vcs_control_dir
-            )
-        ),
-        file_filter=lambda f: not is_pyc_file(f),
+        dir_filter=_vcs_dir_filter(vcs, project_name),
+        file_filter=_vcs_file_filter(vcs),
     )

pex/pip/version.py

@@ -369,6 +369,13 @@ class PipVersion(Enum["PipVersionValue"]):
         requires_python=">=3.9,<3.16",
     )
 
+    v25_3 = PipVersionValue(
+        version="25.3",
+        setuptools_version="80.9.0",
+        wheel_version="0.45.1",
+        requires_python=">=3.9,<3.16",
+    )
+
     VENDORED = v20_3_4_patched
     LATEST = LatestPipVersion()
     LATEST_COMPATIBLE = LatestCompatiblePipVersion()