Upgrade embedded pip to fix Safety warnings

.github/workflows/tox.yml

@@ -27,14 +27,14 @@ jobs:
         with:
           virtualenvs-create: true
           virtualenvs-in-project: true
+      - name: Install Dependencies
+        run: poetry install -v
       - name: Upgrade embedded wheels in the virtualenv
         # This is the recommended way to upgrade things like pip within the
         # virtualenv.  If there is a vulnerability in pip, then Safety will
         # alert on it, which is why it's important for these to be up-to-date.
         # See: https://github.com/python-poetry/poetry/issues/1651#issuecomment-746486601
         run: poetry run virtualenv --upgrade-embed-wheels
-      - name: Install Dependencies
-        run: poetry install -v
       - name: Run Tox test suite
         run: poetry run tox -c .toxrc -e "checks,coverage"
       - name: Upload coverage data to coveralls.io