Currently, running running `./mach vendor python --upgrade` will not do anything different, because all dependencies are pinned. In later patches, we can unpin dependencies and that will make any future runs with `--upgrade` added pull the newest versions from PyPi that are universally compatible. Differential Revision: https://phabricator.services.mozilla.com/D223430