[dependabot]

Bumps litellm from 1.96.2 to 1.106.5.

Release notes

Sourced from litellm's releases.

v1.106.5

Verify this release

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.5

Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.106.5

1 PR. 1 changed. No action needed to upgrade

Changes

• Logging and observability: Changed failure logs for rejected requests to keep only core request fields, tags and guardrail details (#48599) Also in 1.103.10, 1.104.8, 1.105.6
• Logging and observability: Changed the GCS logger to use the bucket and credentials configured on the proxy (#48599) Also in 1.103.10, 1.104.8, 1.105.6

---

Backport #48605 · Full changelog

v1.106.4

Verify this release

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.4

Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.106.4

3 PRs. 2 fixed. No action needed to upgrade

Changes

• Deployment: Fixed the proxy sometimes exiting on startup with an ImportError when it cannot reach the remote model cost map, broken since v1.104.0 (#46711) Also in 1.104.7, 1.105.5
• Deployment: Fixed image scans flagging brotli 1.2.0, the emSign ECC Root CA - G3 and unused lockfile packages (#48283, #48300)

---

Backport #48294 · Full changelog

v1.106.3

[!IMPORTANT]

... (truncated)

Commits

• 2569eb8 Merge pull request #48605 from BerriAI/litellm_backport_48599_stable_1_106_x
• 5197c97 bump: version 1.106.5
• fb0506d fix(proxy): merge only dict client metadata into pass-through logging
• 6566067 fix(proxy): always strip client guardrail info and mirror failure attribution...
• 116dd05 fix(proxy): keep allowlisted metadata in proxy-only failure logs
• 97474e4 fix(proxy): drop caller metadata from proxy-only failure logs
• dd8d12d fix(proxy): build proxy-only failure logs from an allowlist and ignore reques...
• ea7ca16 Merge pull request #48300 from BerriAI/lens-runtime-1.106
• 8c3bd28 build(deps): bump webpki-roots and webpki-root-certs to 1.0.11
• 020f635 build(docker): move the lens image to the newer wolfi-base
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[dependabot]

Superseded by #63.