build(deps): bump the minor-and-patch group in /.github/workflows wit…

…h 2 updates (#563)

* build(deps): bump the minor-and-patch group

Bumps the minor-and-patch group in /.github/workflows with 2 updates: [pip](https://github.com/pypa/pip) and [virtualenv](https://github.com/pypa/virtualenv).


Updates `pip` from 24.0 to 24.2
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@24.0...24.2)

Updates `virtualenv` from 20.19.0 to 20.26.6
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.19.0...20.26.6)

---
updated-dependencies:
- dependency-name: pip
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: virtualenv
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* deps: use `uv pip compile` for constraints

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pete Gadomski <pete.gadomski@gmail.com>

.github/workflows/constraints.in

@@ -0,0 +1,5 @@
+nox
+nox-poetry
+pip
+poetry
+virtualenv

.github/workflows/constraints.txt

@@ -1,5 +1,121 @@
-pip==24.0
+# This file was autogenerated by uv via the following command:
+#    uv pip compile .github/workflows/constraints.in
+argcomplete==3.5.0
+    # via nox
+build==1.2.2
+    # via poetry
+cachecontrol==0.14.0
+    # via poetry
+certifi==2024.8.30
+    # via requests
+cffi==1.17.1
+    # via xattr
+charset-normalizer==3.3.2
+    # via requests
+cleo==2.1.0
+    # via poetry
+colorlog==6.8.2
+    # via nox
+crashtest==0.4.1
+    # via
+    #   cleo
+    #   poetry
+distlib==0.3.8
+    # via virtualenv
+dulwich==0.21.7
+    # via poetry
+fastjsonschema==2.20.0
+    # via poetry
+filelock==3.16.1
+    # via
+    #   cachecontrol
+    #   virtualenv
+idna==3.10
+    # via requests
+importlib-metadata==8.5.0
+    # via keyring
+installer==0.7.0
+    # via poetry
+jaraco-classes==3.4.0
+    # via keyring
+keyring==24.3.1
+    # via poetry
+more-itertools==10.5.0
+    # via jaraco-classes
+msgpack==1.1.0
+    # via cachecontrol
 nox==2024.4.15
+    # via
+    #   -r .github/workflows/constraints.in
+    #   nox-poetry
 nox-poetry==1.0.3
-poetry~=1.4.2
-virtualenv==20.19.0
+    # via -r .github/workflows/constraints.in
+packaging==24.1
+    # via
+    #   build
+    #   nox
+    #   nox-poetry
+    #   poetry
+pexpect==4.9.0
+    # via poetry
+pip==24.2
+    # via -r .github/workflows/constraints.in
+pkginfo==1.11.1
+    # via poetry
+platformdirs==4.3.6
+    # via
+    #   poetry
+    #   virtualenv
+poetry==1.8.3
+    # via
+    #   -r .github/workflows/constraints.in
+    #   poetry-plugin-export
+poetry-core==1.9.0
+    # via
+    #   poetry
+    #   poetry-plugin-export
+poetry-plugin-export==1.8.0
+    # via poetry
+ptyprocess==0.7.0
+    # via pexpect
+pycparser==2.22
+    # via cffi
+pyproject-hooks==1.2.0
+    # via
+    #   build
+    #   poetry
+rapidfuzz==3.10.0
+    # via cleo
+requests==2.32.3
+    # via
+    #   cachecontrol
+    #   poetry
+    #   requests-toolbelt
+requests-toolbelt==1.0.0
+    # via poetry
+shellingham==1.5.4
+    # via poetry
+tomli==2.0.2
+    # via
+    #   build
+    #   nox
+    #   poetry
+tomlkit==0.13.2
+    # via
+    #   nox-poetry
+    #   poetry
+trove-classifiers==2024.9.12
+    # via poetry
+urllib3==2.2.3
+    # via
+    #   dulwich
+    #   requests
+virtualenv==20.26.6
+    # via
+    #   -r .github/workflows/constraints.in
+    #   nox
+    #   poetry
+xattr==1.1.0
+    # via poetry
+zipp==3.20.2
+    # via importlib-metadata