Fix CVE pkgs

[jperez999]

Description

Checklist

• I am familiar with the Contributing Guidelines.
• New or existing tests cover these changes.
• The documentation is up to date with these changes.

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[greptile-apps]

Greptile Summary

The PR updates vulnerable dependencies and aligns the Linux local-inference stack around exact vLLM and FlashInfer versions.

• Pins vLLM 0.25.1 with FlashInfer 0.6.13 in the published local extra.
• Raises minimum versions for Ray, Transformers, NLTK, Pillow, and LiteLLM.
• Updates the packaging assertion for the new LiteLLM minimum.
• Removes Intel macOS jobs from the CI and integration-test matrices.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains; the current published local extra exactly pins vLLM 0.25.1 and both FlashInfer packages to 0.6.13, resolving the previously reported open-ended GPU dependency stack.

Important Files Changed

Filename	Overview
nemo_retriever/pyproject.toml	Updates dependency constraints and completes the previously requested exact vLLM pin alongside the matching FlashInfer versions.
nemo_retriever/tests/test_service_packaging.py	Updates the packaging test to assert the revised LiteLLM minimum.
.github/workflows/ci-pull-request.yml	Removes the Intel macOS runner from the pull-request test matrix.
.github/workflows/integration-test-library-mode.yml	Removes the Intel macOS runner from the library-mode integration matrix.

_{Reviews (5): Last reviewed commit: "fix formatting" | Re-trigger Greptile}

[kheiss-uwzoo]

Docs follow-up for the macOS Intel drop (Randy / Slack):

• Changelog: draft docs(extraction): add 26.08 release notes for post-26.05 changes #2434
• Install guide / support matrix + README: draft https://github.com/NVIDIA/NeMo-Retriever/pull?q=is%3Apr+head%3Adocs%2Fdrop-macos-intel-support (opening as docs/drop-macos-intel-support)

[kheiss-uwzoo]

Install-guide draft is up: #2441 (pairs with changelog in draft #2434).