Skip to content

deps: update litellm requirement from >=1.85.0 to >=1.88.1 in /backend#104

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/litellm-gte-1.86.0
Open

deps: update litellm requirement from >=1.85.0 to >=1.88.1 in /backend#104
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/litellm-gte-1.86.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 26, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on litellm to permit the latest version.

Release notes

Sourced from litellm's releases.

v1.88.1

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.88.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.88.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.88.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

Full Changelog: BerriAI/litellm@v1.88.0...v1.88.1

Commits
  • 9c117a5 Merge pull request #29989 from BerriAI/litellm_bump_version_1_88_1
  • b577372 chore(release): bump version to 1.88.1
  • f685f2f Merge pull request #29987 from BerriAI/litellm_deps_pyjwt_ws_backport_1_88_x
  • aa2deee build(deps): bump pyjwt to 2.13.0 and ws override to 8.20.1
  • bde16ff test(proxy): patch utils.get_server_root_path in passthrough auth tests
  • 3d00874 fix(proxy): match passthrough registry routes bare-to-bare with SERVER_ROOT_PATH
  • 67428bd Merge pull request #29639 from BerriAI/litellm_ghsa_q775_defaults_rc188
  • c5d214c fix(key_generate): harden GHSA-q775 session-token exemption against default_k...
  • c2a0a6a Merge pull request #29637 from BerriAI/litellm_cherrypick_1_88_0_rc3
  • 26e9689 fix(key_generate): exempt UI/CLI session tokens from the budget ceiling for t...
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github May 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from sinatayebati as a code owner May 26, 2026 02:01
@dependabot dependabot Bot changed the title deps: update litellm requirement from >=1.85.0 to >=1.86.0 in /backend deps: update litellm requirement from >=1.85.0 to >=1.87.0 in /backend Jun 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/backend/litellm-gte-1.86.0 branch from 561c861 to 80466b4 Compare June 3, 2026 22:06
Updates the requirements on [litellm](https://github.com/BerriAI/litellm) to permit the latest version.
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@v1.85.0...v1.88.1)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.86.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps: update litellm requirement from >=1.85.0 to >=1.87.0 in /backend deps: update litellm requirement from >=1.85.0 to >=1.88.1 in /backend Jun 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/backend/litellm-gte-1.86.0 branch from 80466b4 to 9388824 Compare June 10, 2026 05:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants