[dependabot]

Bumps litellm from 1.100.4 to 1.106.4.

Release notes

Sourced from litellm's releases.

v1.106.4

Verify this release

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.4

Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.106.4

3 PRs. 2 fixed. No action needed to upgrade

Changes

• Deployment: Fixed the proxy sometimes exiting on startup with an ImportError when it cannot reach the remote model cost map, broken since v1.104.0 (#46711) Also in 1.104.7, 1.105.5
• Deployment: Fixed image scans flagging brotli 1.2.0, the emSign ECC Root CA - G3 and unused lockfile packages (#48283, #48300)

---

Backport #48294 · Full changelog

v1.106.3

[!IMPORTANT] The image-signing key has changed. Starting with this release, every Docker image and Helm chart is signed with the new cosign key from commit e82a3c6. Verifying with the previous key from commit 0112e53 will fail.

Update anything that pins the old cosign.pub: cosign verify scripts, CI checks, and admission policies such as Kyverno, Sigstore policy-controller or Connaisseur.

New cosign.pub SHA-256: e3fe3e08c44b16407fe0b37c43b4f8b603b3a0f4ee74c29e647bc022d762c2c0

Verify this release

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.3

Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.106.3

4 PRs. 1 changed, 1 removed. 1 needs action

Action required

• Deployment: Verify image signatures with the cosign.pub from commit e82a3c6, the previous key no longer matches (#48103) Also in 1.103.8, 1.104.6, 1.105.4

... (truncated)

Commits

• ea7ca16 Merge pull request #48300 from BerriAI/lens-runtime-1.106
• 8c3bd28 build(deps): bump webpki-roots and webpki-root-certs to 1.0.11
• 020f635 build(docker): move the lens image to the newer wolfi-base
• a554fcf Merge pull request #48294 from BerriAI/diag-catalog-1.106
• 3af2c05 Merge pull request #48283 from BerriAI/image-content-cleanup-slim-1.106
• 1cf20bf bump: version 1.106.4
• f1ca9f9 refactor(rust-bridge): remove the LoggerRule concept from the catalog (#46711)
• 77fc426 build(docker): copy only runtime files into the gateway, backend and migratio...
• b027ce7 build(docker): move to newer wolfi-base and nginx base images
• 4fa8bf1 Merge pull request #48142 from BerriAI/litellm_backport_1_106_x_liteadmin_pin
• Additional commits viewable in compare view