Run bazel run @unpinned_pip//:pin.update to keep PIP_PACKAGES in //:WORKSPACE in sync with //:requirements.txt.