chore(deps-dev): update vllm requirement from >=0.20.0 to >=0.20.2

[dependabot]

Updates the requirements on vllm to permit the latest version.

Release notes

Sourced from vllm's releases.

v0.20.2

vLLM v0.20.2

Highlights

This release features 6 commits from 6 contributors (0 new)!

This is a small patch release with bug fixes for DeepSeek V4, gpt-oss, and Qwen3-VL

Bug Fixes

• DeepSeek V4 sparse attention: Re-enable the persistent topk path on Hopper and ensure the memset kernel runs at CUDA graph capture time regardless of max_seq_len, fixing the MTP=1 hang on DeepSeek V4 (#41665, revert of #41605).
• DeepSeek V4 KV cache: Fixed a "failure to allocate KV blocks" error in the V1 engine KV cache manager (#41282).
• gpt-oss MXFP4 + torch.compile: Plumbed hidden_dim_unpadded through the moe_forward fake op so MXFP4 works under torch.compile on v0.20.x (#42002, backport of #41646).
• Qwen3-VL: Removed an invalid deepstack boundary check that could fail under heavy load (#40932).

Contributors

@​ywang96, @​zyongye, @​stecasta, @​wzhao18, @​Isotr0py, @​khluu

Commits

• bc150f5 [CI] Automate Docker Hub release image publishing (#40415)
• 9bc5a0d [Bugfix] Remove invalid deepstack boundary check for Qwen3-VL (#40932)
• fa8acca [Bugfix] Fix failure to allocate KV blocks error (#41282)
• 637495c [Bugfix] Plumb hidden_dim_unpadded through moe_forward fake to fix gpt-oss MX...
• fbd51e3 [Bugfix] Fix condition to clear persistent topk so that it can be captured re...
• 75b3867 Revert "Temporary disable persistent topk for Hopper (#41605)"
• 132765e Revert "[DSv4] Use cvt PTX for FP32->FP4 conversion (#41015)"
• 43a21e6 Temporary disable persistent topk for Hopper (#41605)
• f98b274 [DSv4] Tune default value of VLLM_MULTI_STREAM_GEMM_TOKEN_THRESHOLD (#41526)
• 228d225 [DSV4] Guard megamoe flag with Pure TP (#41522)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)