Bump Hex package manager to `2.0`

[jeffwidman]

Is there an existing issue for this?

• I have searched the existing issues

Code improvement description

We had to hold back the Hex package manager to 1.0.1 in #6006 due to compiler errors, for example https://github.com/dependabot/dependabot-core/actions/runs/3363786929/jobs/5577382297:

** (CompileError) check_update.exs:77: Hex.Version.InvalidRequirementError.__struct__/0 is undefined

1. At some point we need to update Hex to 2.0.0 and fix that compiler error.
2. Going forward, even after the upgrade we should probably continue to pin Hex to avoid these unexpected surprises.
3. We should also move where it's pinned to a more intuitive location: fix hex native helpers: v2.0.0 removed Hex.Version.InvalidRequirementError #6006 (comment)

[tiagoefmoraes]

You can use Version.InvalidRequirementError directly from elixir instead of Hex.Version.InvalidRequirementError

[sorentwo]

@jeffwidman Seconding the comment from @tiagoefmoraes, Hex doesn't have a public API, and you should use the official InvalidRequirementError.

[jeffwidman]

Thanks!

Do either of you want to submit a PR? Since it's just the location of a type, should be very straightforward... the bumping Hex version and changing the pinned location can be done as a separate PR.

No worries if not interested.

[jeffwidman]

Related fixes:

• Use elixir's InvalidRequirementError #6028
• Move location of hex version pin #6037
• Install hex only once, the specific version we want #6252
• Bump Hex to 2.0.1 #6026

[isaacsanders]

I think I have all the current tests passing: #7890

[isaacsanders]

Got the last few stragglers