Bump pip from 19.3.1 to 20.0.2

[dependabot-preview]

Bumps pip from 19.3.1 to 20.0.2.

Changelog

Sourced from pip's changelog.

20.0.2 (2020-01-24)

Bug Fixes

• Fix a regression in generation of compatibility tags. (#7626)

Vendored Libraries

• Upgrade packaging to 20.1

20.0.1 (2020-01-21)

Bug Fixes

• Rename an internal module, to avoid ImportErrors due to improper uninstallation. (#7621)

20.0 (2020-01-21)

Process

• Switch to a dedicated CLI tool for vendoring dependencies.

Deprecations and Removals

• Remove wheel tag calculation from pip and use packaging.tags. This should provide more tags ordered better than in prior releases. (#6908)
• Deprecate setup.py-based builds that do not generate an .egg-info directory. (#6998)
• The pip>=20 wheel cache is not retro-compatible with previous versions. Until pip 21.0, pip will continue to take advantage of existing legacy cache entries. (#7296)
• Deprecate undocumented --skip-requirements-regex option. (#7297)
• Deprecate passing install-location-related options via --install-option. (#7309)
• Use literal "abi3" for wheel tag on CPython 3.x, to align with PEP 384 which only defines it for this platform. (#7327)
• Remove interpreter-specific major version tag e.g. cp3-none-any from consideration. This behavior was not documented strictly, and this tag in particular is not useful. Anyone with a use case can create an issue with pypa/packaging. (#7355)
• Wheel processing no longer permits wheels containing more than one top-level .dist-info directory. (#7487)
• Support for the git+git@ form of VCS requirement is being deprecated and will be removed in pip 21.0. Switch to git+https:// or git+ssh://. git+git:// also works but its use is discouraged as it is insecure. (#7543)

Features

• Default to doing a user install (as if --user was passed) when the main site-packages directory is not writeable and user site-packages are enabled. (#1668)
• Warn if a path in PATH starts with tilde during pip install. (#6414)
• Cache wheels built from Git requirements that are considered immutable, because they point to a commit hash. (#6640)
• Add option --no-python-version-warning to silence warnings related to deprecation of Python versions. (#6673)
• Cache wheels that pip wheel built locally, matching what pip install does. This particularly helps performance in workflows where pip wheel is used for building before installing. Users desiring the original behavior can use pip wheel --no-cache-dir. (#6852)

... (truncated)

Commits

• 931749f Bump for release
• 2f6cd83 Merge pull request #7643 from pradyunsg/vendoring/update-packaging
• 1cf779c Add a NEWS fragment for release notes
• 78a7722 Upgrade packaging to 20.1
• 1d17df6 Merge pull request #7641 from pfmoore/gitattributes_fix
• 848472e Modify gitattributes to match changed location of vendoring patches
• 54f9f83 Merge pull request #7639 from pypa/revert-7600-release-rewrite-lineendings
• 3894431 Revert "Explicitly set newline when rewriting for release (#7600)"
• f1cd4cb Merge pull request #7608 from uranusjr/global-cleanup
• ea7def8 Merge pull request #7624 from pradyunsg/automation/release-process-improvements
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)