[dependabot]

Bumps litellm from 1.96.2 to 1.108.2.

Release notes

Sourced from litellm's releases.

1.108.2 (LTS)

[!TIP] The lts image tag always points to the latest LTS release. Pull ghcr.io/berriai/litellm:lts to stay on the newest LTS patch

Verify this release

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.108.2

Same command for litellm-database, litellm-non_root and the docker.io/litellm/* images

What's new in 1.108.2 (LTS)

12 PRs. 11 fixed, 1 changed. No action needed to upgrade

Changes

• OpenAI: Fixed openai/ deployments with an empty api_key sending OPENAI_ADMIN_KEY as the bearer token (#50218)
• AWS Bedrock: Fixed Converse service_tier so unsupported tiers answer 400 and reserved, auto and standard_only are honored (#50360)
• AWS Bedrock: Fixed Invoke dropping the per-turn-control-2026-07-01 beta on Claude 4.5 and newer (#50362)
• Vertex AI and Gemini: Fixed chirp text-to-speech ignoring vertex_location, so US and EU deployments call their multi-region host (#50392)
• Chat completions: Fixed response_format: json_object on openai/responses/* and azure/responses/* answering 400 about the word json (#50267)
• Chat completions: Fixed base64 PDFs sent to Claude as image_url answering 400, and Bedrock JSON schema calls dropping thinking (#50280)
• Responses API: Fixed /v1/responses/compact returning 500 when a during_call guardrail is on by default (#50274)
• Embeddings, images and audio: Fixed audio transcription errors echoing the full provider reply, transcript included, to clients and logs (#50325)
• MCP: Changed hosted MCP tools that a translated route cannot run to return a clear 400, or be dropped with drop_params (#50348)
• Routing and fallbacks: Fixed groups that accept unmatched tags rejecting requests after affinity or cooldown filtering (#48470)
• Routing and fallbacks: Fixed prompt caching routing not pinning follow-ups to one deployment when turn_off_message_logging is on (#50276)
• Cost tracking and pricing: Fixed spend rows being dropped and valid keys getting 401 while Postgres restarts or shuts down (#50132)

---

Backport #50297 · Backport #50326 · Full changelog

1.108.1 (LTS)

[!TIP] The lts image tag always points to the latest LTS release. Pull ghcr.io/berriai/litellm:lts to stay on the newest LTS patch

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. This release is signed with the key introduced in commit e82a3c6.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the published signing key:

</tr></table> 

... (truncated)

Commits

• 831a14c Merge pull request #50280 from BerriAI/litellm_backport_translation_p0_lts_1_...
• e716a2c Merge branch 'lts/1.108.x' into litellm_backport_translation_p0_lts_1_108_x
• 73e9ac9 Merge pull request #50267 from BerriAI/litellm_backport_49957_lts_1_108_x
• 58d96d3 Merge pull request #50348 from BerriAI/litellm_backport_48931_lts_1_108_x
• be09d65 Merge pull request #50392 from BerriAI/litellm_backport_50255_lts_1_108_x
• 9155cd2 Merge pull request #50360 from BerriAI/litellm_backport_bedrock_converse_serv...
• 7ab17df Merge pull request #50362 from BerriAI/litellm_backport_43086_lts_1_108_x
• 612587a Merge pull request #50326 from BerriAI/litellm_backport_1108_2_fixes_lts_1_108_x
• d6cfa6f chore(deps): bump oauthlib 4.0.0 -> 4.0.1 on lts/1.108.x
• eb25b17 fix(vertex_ai): honor vertex_location for the Cloud Text-to-Speech endpoint (...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!