Bump the workflows-dependencies group

Bumps the workflows-dependencies group in /.github/workflows with 3 updates: [pip](https://github.com/pypa/pip), [poetry](https://github.com/python-poetry/poetry) and [virtualenv](https://github.com/pypa/virtualenv).


Updates `pip` from 25.3 to 26.0
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@25.3...26.0)

Updates `poetry` from 2.2.1 to 2.3.1
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@2.2.1...2.3.1)

Updates `virtualenv` from 20.35.4 to 20.36.1
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.35.4...20.36.1)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: '26.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: workflows-dependencies
- dependency-name: poetry
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workflows-dependencies
- dependency-name: virtualenv
  dependency-version: 20.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workflows-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/constraints.txt

@@ -1,5 +1,5 @@
-pip==25.3
+pip==26.0
 nox==2025.11.12
 nox-poetry==1.2.0
-poetry==2.2.1
-virtualenv==20.35.4
+poetry==2.3.1
+virtualenv==20.36.1