[Bug]: security: bump minimum setuptools version in requirements/common.txt

[ev227166-spec]

Your current environment

<d

Details

The output of python collect_env.py

OS: Linux (Termux / Android)
Python Version: 3.11+
vLLM Repository: main branch audit


### 🐛 Describe the bug

A security audit on `requirements/common.txt` identified known security advisories affecting the pinned version of `setuptools`:

- **setuptools (`77.0.3` → Fix: `>=83.0.0`):** Affected by `PYSEC-2025-49` and `PYSEC-2026-3447`.

### Proposed Fix
Update the lower bound in `requirements/common.txt`:
```text
setuptools>=83.0.0

### Before submitting a new issue...

- [x] Make sure you already searched for relevant issues, and asked the chatbot living at the bottom right corner of the [documentation page](https://docs.vllm.ai/en/latest/), which can answer lots of frequently asked questions.

[abdelrahmanmagdii]

Hello, I am interested in helping out with this. I'll trace why the <81 upperbound exists, and report back, proposing a change.
Thanks!

[ev227166-spec]

Thanks @abdelrahmanmagdii! Looking forward to your findings on the <81 upperbound. Let me know if you need any extra details or testing from my end.

[abdelrahmanmagdii]

so bumping common.txt to >=83 like suggested would create conflicts with CPU and XPU setuptools constraints for starters (most likely even more)
I don't think the security or dependency concern here warrants changing all of that, but if a maintainer confirms it does I would be happy to help in anyway
Thanks

[ev227166-spec]

Thanks for checking and pointing that out @abdelrahmanmagdii. Makes total sense regarding the CPU/XPU setup constraints. I'll defer to the core maintainers on whether they want to address this in a separate targeted update. Appreciate the feedback!