Update dependency litellm to v1.100.0 by renovate[bot] · Pull Request #357 · IBM/AssetOpsBench

renovate · 2026-06-09T02:50:24Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
litellm	`==1.94.0` → `==1.100.0`

Release Notes

BerriAI/litellm (litellm)

`v1.100.0`

Compare Source

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.100.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.100.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.100.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

fix(responses): keep the conversation when chaining previous_response_id on the bridge by @mateo-berri in #37956
feat(newrelic): per-team New Relic trace routing via team callbacks by @yucheng-berri in #37603
perf(ci): cache uv dependencies in the lint job by @yuneng-berri in #37783
perf(ci): fan the budget checkers out across cores by @yuneng-berri in #37784
ci: port the Postgres suites off CircleCI onto service containers by @yuneng-berri in #37785
feat(ci): gate patching of SDK internals in tests as TQ008 by @yuneng-berri in #37787
ci: measure enterprise/ coverage by @yuneng-berri in #37788
ci: run the keyless caching tests that ran in no job by @yuneng-berri in #37790
fix(ci): run the migration DDL guard, and stop it reading comments as SQL by @yuneng-berri in #37791
ci: run the enterprise package suite in GitHub Actions by @yuneng-berri in #37798
perf(ci): give the two longest unit shards the runner's spare cores by @yuneng-berri in #37804
test(exception-mapping): pin the status and error-shape table every provider maps to by @yuneng-berri in #37807
fix(terraform): add soft_budget, tags, and soft_budget_alerting_emails to litellm_team by @yuneng-berri in #37918
fix(ui): theme the created-key box so it follows dark mode by @yuneng-berri in #37985
fix(ui): restore the public model name tooltip layout in the add model flow by @yuneng-berri in #37986
fix(ui): render team and org tpm/rpm limits of 0 as 0 instead of Unlimited by @yuneng-berri in #37916
fix(ui): repoint the key detail URL to the rotated hash after regenerating by @yuneng-berri in #37968
fix(ui): make playground chat bubbles theme-aware by @yuneng-berri in #37978
fix(UI): correct skill install command and marketplace setup UX by @ozolam in #33514
fix(proxy): skip health checks for strategy routers by @devin-ai-integration[bot] in #37966
fix(databricks): bill cached tokens at cache rates and add missing Claude pricing by @mateo-berri in #37975
fix(anthropic): round-trip thinking blocks to OpenAI backends on /v1/messages by @mateo-berri in #37953
fix(a2a): normalize agent card protocolBinding casing before transport match by @devin-ai-integration[bot] in #37917
fix(interactions): track cost and spend for Google Interactions API requests by @mateo-berri in #33310
fix(bedrock): stop emitting an empty assistant delta after the finish_reason chunk by @devin-ai-integration[bot] in #36806
fix(anthropic): reconcile enum with declared type in output_format schema by @dkindlund in #37882
feat(azure_ai): support entra id / oauth auth on every azure ai foundry route by @devin-ai-integration[bot] in #35415
fix(ui): boot the UI image as an arbitrary uid by anchoring nginx writes under /tmp by @devin-ai-integration[bot] in #37982
fix(proxy): parse form-encoded video edit/extension bodies after auth by @Souravrajvi0 in #36513
fix(anthropic): keep legacy thinking budget_tokens on Claude 4.6 models on /v1/messages by @mateo-berri in #38108
fix(utils): make prompt_token_calculator count claude models again by @ryan-crabbe-berri in #38130
fix(proxy): keep every value of a repeated form key, and gate the tests that hid it by @ryan-crabbe-berri in #37908
fix(health): apply model_info.health_check_params to health check probes by @mateo-berri in #38101
fix(runwayml): route every generation endpoint and fix video cost tracking by @mateo-berri in #38115
fix(passthrough): attribute spend and release budget reservation on router-model /vllm and /azure routes by @mateo-berri in #38111
fix: match OpenAI SDK wire format on image/video routes by @mateo-berri in #38104
fix(ci): give three unit shards a job deadline that outlasts their pytest budget by @tin-berri in #38139
feat(ui): add Gemini Family auto-router preset by @tin-berri in #38138
fix(logging_worker): carry queued tasks across event-loop change instead of dropping them by @mateo-berri in #38144
feat(proxy): enforce vector-store upload security controls on /v1/rag/ingest by @mateo-berri in #38135
test(e2e): pin require_managed_files enforcement behind a marker-gated stack phase by @mateo-berri in #38117
refactor(ui): move the dashboard onto class-variance-authority by @yuneng-berri in #38125
refactor(utils)!: delete prompt_token_calculator by @ryan-crabbe-berri in #38132
fix(auto-router): list configured auto-routers in the usage picker before they have traffic by @tin-berri in #38129
refactor(ui): install the shadcn field primitive by @yuneng-berri in #38126
fix(complexity_router): keep both ends of a clipped classifier context turn by @tin-berri in #38141
fix(ci): ignore-list recursive form-field flatteners in recursive_detector by @mateo-berri in #38149
fix(passthrough): stop leaking the caller's virtual key on credential-less Vertex passthrough by @mateo-berri in #38114
fix(router): stop copying forwarded credentials into retry breadcrumbs by @mateo-berri in #38133
feat(e2e): record and replay streamed provider responses chunk-for-chunk by @mateo-berri in #38136
fix: tolerate stream chunks without a choices key in stream_chunk_builder by @AkshaySasi in #34382
fix(files): decode x-litellm-model encoded file_id in chat + responses by @hclsys in #29832
fix(videos): forward uploaded source file on /v1/videos/edits to the provider by @mateo-berri in #38155
fix(s3_v2): percent-encode object keys once so signed and sent URLs match by @devin-ai-integration[bot] in #38005
feat(ui): add error-code drilldown for failed requests on caching page by @ryan-crabbe-berri in #38156
feat(search): add Grounding with Bing Search (bing_grounding) as a search provider by @mateo-berri in #38119
ci: ban row-rewriting DML from prisma migrations by @yucheng-berri in #37899
fix(langsmith): keep root-run ids self-consistent so batch ingest stops rejecting header-tagged requests by @yucheng-berri in #38116
ci(e2e): record the e2e suite weekly and replay it on weekdays with zero egress by @mateo-berri in #38163
chore(codeowners): unown ui container plumbing and generated files by @ryan-crabbe-berri in #38124
fix(logging): skip parsing redacted tool call arguments by @devin-ai-integration[bot] in #38169
feat(complexity_router): bound the classifier context block, not each turn in it by @tin-berri in #38145
fix(http_handler): dispose aiohttp session when AsyncHTTPHandler is finalized without a running loop by @anmolg1997 in #36670
fix(proxy): reset a stuck team member's budget by @yassin-berriai in #37971
fix(anthropic/bedrock): request summarized adaptive thinking for reasoning_effort and use provider thinking token counts by @devin-ai-integration[bot] in #37979
fix(completion_extras): forward reasoning_effort=max through the Responses API bridge by @mateo-berri in #38222
feat(vertex_ai): add native Vertex AI Interactions API support by @mateo-berri in #38229
test(mcp): drain the logging worker after each test so queued callbacks cannot leak into the next test by @ryan-crabbe-berri in #38228
fix(ui): forward OAuth issuer/authorization/token/registration URLs from the MCP server edit form by @yassin-berriai in #38154
fix(together_ai): default endpoints to api.together.ai instead of api.together.xyz by @mateo-berri in #38233
fix(bedrock_mantle): register a Bedrock runtime passthrough config so /bedrock/model//invoke works by @mateo-berri in #38231
fix(router): resolve provider from api_base in deployment validation and acompletion by @mateo-berri in #38235
fix(model_prices): raise bedrock_mantle gpt-5.6 max_input_tokens to Mantle's enforced 1050000 by @mateo-berri in #38225
fix(bedrock_mantle): normalize Codex input item types Mantle rejects by @mateo-berri in #38227
fix(proxy): store the actual selected model in spend logs for Azure Model Router by @devin-ai-integration[bot] in #37770
feat(router): per-group supported reasoning efforts with the max level by @tin-berri in #37897
fix(proxy): stop expected 4xx responses from saturating worker CPU on failure logging by @devin-ai-integration[bot] in #38102
fix(caching): use upstream RedisCluster on redis-py with per-connection recovery by @devin-ai-integration[bot] in #38171
perf(auth): drop guaranteed-miss internal-cache Redis read from team object lookup by @devin-ai-integration[bot] in #38073
fix(together_ai): route chat completions through a dedicated TogetherAIChatConfig by @mateo-berri in #38248
fix(ui): read reasoning tokens from Responses API output_tokens_details by @yassin-berriai in #37952
fix(dashboard): don't show a stale provider prompt-cache chip on a response-cache hit by @yassin-berriai in #37951
fix(ui): render tag-based guardrail mode instead of crashing the guardrails page by @devin-ai-integration[bot] in #37493
fix(scim): return user_id as Group members[].value on transformed group responses by @devin-ai-integration[bot] in #38161
fix(scim): preserve existing team memberships when POST /Users adoption carries no groups by @devin-ai-integration[bot] in #38166
fix(router): support mid-stream fallback for anthropic_messages route type by @yassin-berriai in #38153
fix(auth): support wildcard prefixes in jwt team_allowed_routes by @devin-ai-integration[bot] in #37756
feat(models): add missing Together AI serverless models to the cost map by @mateo-berri in #38230
fix(cerebras)!: add max_retries and extra_headers to get_supported_openai_params by @deepanshululla in #36601
fix(anthropic): translate tool_result document blocks in the /v1/messages bridge by @mateo-berri in #38251
fix(team): serialize member_add, member_delete, and delete under the team's advisory lock by @yassin-berriai in #37969
docs(pr-template): split Caveats bullets into severity tiers and call for plain engineering language by @mateo-berri in #38252
fix(anthropic): carry tool_result document blocks through the /v1/messages responses bridge by @mateo-berri in #38261
fix(together_ai): pass tools through for models missing from the registry by @mateo-berri in #38265
fix(anthropic): carry user-content document blocks through the /v1/messages responses bridge by @mateo-berri in #38267
fix(rerank): emit latency and cost headers on /rerank by @devin-ai-integration[bot] in #35419
perf(streaming): add shared JSONFragmentAccumulator for Vertex and Anthropic by @deepanshululla in #36610
fix(together_ai): strip internal thinking fields from outbound messages, keep reasoning_content by @mateo-berri in #38275
fix(router): persist attempted_fallbacks and original_model_group into spend logs metadata by @yucheng-berri in #38107
fix(logging): redact tool call arguments to valid JSON and preserve null content by @yucheng-berri in #38182
fix(ui): stack policy flow builder below the popup layer so guardrail options render by @devin-ai-integration[bot] in #38273
test: gate the test tree on B003 so a test cannot swap os.environ for a plain dict by @ryan-crabbe-berri in #38274
refactor(repositories): type prisma table access with one generic protocol by @mateo-berri in #38205
fix(anthropic): buffer streamed responses carrying server-fulfilled tools so retrieval tool calls never reach the client by @mateo-berri in #36245
test(together_ai): regression suite across chat, responses, and messages surfaces by @mateo-berri in #38283
feat(logging): add async_post_call_failure_deployment_hook by @deepanshululla in #36657
chore: bump litellm-enterprise 0.1.59 -> 0.1.60, litellm 1.99.0 -> 1.100.0 by @yuneng-berri in #38243
test(e2e): cover Together AI reasoning, tool calls, template kwargs, and cost through a live proxy by @mateo-berri in #38286
fix(logging): keep tracebacks for provider-originated 4xx errors by @mateo-berri in #38296
chore(ci): promote internal staging to main by @yuneng-berri in #38293
refactor(ui): install the shadcn alert primitive by @yuneng-berri in #38300
refactor(ui): re-pull label, textarea, separator and skeleton from the registry by @yuneng-berri in #38302
feat(prometheus): configure deployment caller identity by @mphilippnv in #38221
test(e2e): let the Together replayed-reasoning case survive a single provider miss by @mateo-berri in #38314
fix(otel): map /v1/messages provider errors before failure logging by @mateo-berri in #38310
fix(exceptions): map upstream status codes for providers with no exception_type branch by @mateo-berri in #38318
fix(passthrough): record ownership of streamed responses under managed ids by @mateo-berri in #38320
fix(proxy): encrypt streamed responses ids on /openai/v1/responses and /responses aliases by @mateo-berri in #38325
test(cost-calc): pin the rate fallbacks inside a tiered-pricing tier by @yuneng-berri in #38327
test(e2e): cover the Bedrock provider-feature cells customers run by @mateo-berri in #38232
fix(together_ai): fail open on response_format instead of dropping it for unregistered models by @mateo-berri in #38269
fix(proxy): honor DATABASE_DISABLE_PREPARED_STATEMENTS in componentized entrypoints by @devin-ai-integration[bot] in #38363
fix(anthropic-responses): preserve structured output strictness by @eugene-yao-zocdoc in #38211
chore(typing): roll up the daily tech debt cleanups from Aug 20 to Aug 26 by @devin-ai-integration[bot] in #37922
fix(router): resolve hidden aliases for explicit lookup by @daniel-meismer-zocdoc in #38272
fix(ui): keep focus in the add model public name input while typing by @devin-ai-integration[bot] in #38366
fix(model_prices): price 1-hour cache writes on claude-3-haiku and claude-3-opus at 2x input by @mateo-berri in #38371
fix(proxy): keep the caller's Google token on credential-less Vertex passthrough under custom auth by @mateo-berri in #38299
fix(mcp): preserve provider access token lifetime by @daniel-meismer-zocdoc in #38271
chore(ui): remove stale "New" badges from the dashboard by @yuneng-berri in #38374
test(cost-estimate): pin the prices and period totals /cost/estimate returns by @yuneng-berri in #38315
fix(ci): let the mutation workflow find covered lines so it generates mutants by @yuneng-berri in #38305
fix(model_prices): raise bedrock_mantle gpt-5.5 and gpt-5.4 max_input_tokens to Mantle's enforced 1050000 by @mateo-berri in #38368
fix(azure/realtime): authenticate realtime websocket with Azure AD token when no api-key by @devin-ai-integration[bot] in #34658
fix(bedrock): map reasoning_effort to reasoning.effort for OpenAI GPT-5.x on Converse by @6matt in #38279
test(prometheus): cover caller-identity config failure cases by @yucheng-berri in #38380
fix(redis): support credential providers across clients by @eugene-yao-zocdoc in #38094
fix(health): support mode: image_edit in health checks by @devin-ai-integration[bot] in #38291
fix(cost-map): add US data residency uplift to claude-sonnet-4-6 and mythos entries by @mateo-berri in #38369
fix(anthropic): raise missing-credential error on /v1/messages passthrough by @devin-ai-integration[bot] in #38240
fix(mcp): complete DCR bridge OAuth challenges by @daniel-meismer-zocdoc in #37384
test(proxy): pin the request-validation contracts in proxy/_types.py by @yuneng-berri in #38307
docs(CLAUDE.md): add pull-before-work rule by @mateo-berri in #38386
fix(anthropic): scale cache costs by fast mode and trust served speed by @mateo-berri in #38378
fix(pricing): add azure gpt-5.6 cache write rates and correct data zone priority by @mateo-berri in #38370
docs: tighten the pull-before-work rule in CLAUDE.md by @devin-ai-integration[bot] in #38389
fix(health): strip credential fields from GET /health output by @Siraj637909 in #37090
fix(minimax): attach MINIMAX_API_KEY on anthropic messages requests by @mateo-berri in #38393
refactor(ui): replace hand-picked z-index values with one named scale and lint it by @ryan-crabbe-berri in #38282
fix(health): probe Azure GA realtime path for transcription-only models by @mateo-berri in #38390
fix(bedrock): parse cacheDetails for Converse 1h/5m cache write cost split by @danielva-monday in #36762
fix(caching): flush async cache writes cancelled at event loop shutdown by @mateo-berri in #38385
fix(router): resolve model_group_alias before pre-routing strategy dispatch by @tin-berri in #38382
feat(proxy): enforce rpm/tpm on model add + fix validation error title in UI by @kunal2002 in #36518
refactor(ui): move every page header onto the shared PageHeader by @yuneng-berri in #38306
fix(proxy): stop cache eviction errors from failing /key/update by @yuneng-berri in #38308
fix(aiohttp): honor global ssl_verify on the aiohttp_openai handler path by @mateo-berri in #38400
fix(logging_worker): rescue dequeued logging tasks lost at event loop close by @mateo-berri in #38394
fix(caching): require the namespace delimiter when checking already-namespaced redis keys by @mateo-berri in #38403
fix(prompts): reject keyed prompt_data with prompt_id and populate prompt version by @mateo-berri in #38404
fix(cost_calculator): resolve real cost key when model_name alias contains '/' by @ksk2023 in #38344
fix(cost-map): correct prompt_cache_min_tokens for Claude Fable 5 and backfill Anthropic re-export entries by @mateo-berri in #38405
test(azure-ai): pin the 422 retry that drops the field the provider rejected by @yuneng-berri in #38309
refactor(ui): read the auto-router tier set through one row list by @tin-berri in #38408
fix(proxy): stop empty DB router_settings lists from clobbering yaml fallbacks by @mateo-berri in #38406
fix(team): allow no-reset default budgets for team members by @devin-ai-integration[bot] in #37708
fix: forward image content lists to DeepSeek vision models by @yucheng-berri in #38397
fix(fireworks_ai): stop using the trace id as the session affinity key by @Hamjaster in #35754
fix(gemini-realtime): keep the client's voice on Vertex AI native-audio Live by @yucheng-berri in #38395
fix(vertex_ai): bill Gemini grounding per unique web search query by @ousamabenyounes in #36397
fix(health): make the image_edit health probe moderation-safe by @mateo-berri in #38417
test: gate the test tree on fifteen assertion and handler rules it already satisfies by @ryan-crabbe-berri in #38361
fix(proxy): key lazy openapi stubs off registered features, not sys.modules by @mateo-berri in #38416
fix(proxy): derive auto-router health from its underlying models by @tin-berri in #38174
fix(responses): let cache-control injection reach the system prompt from instructions by @tin-berri in #38120
fix(gemini): bill Google Maps grounding as its own SKU by @mateo-berri in #38418
fix(speech): keep proxy metadata and completion cost through the TTS completion bridge by @mateo-berri in #38414
fix: map Gemini ON_DEMAND_FLEX traffic type to flex service tier by @bisma-nawaz in #37724
feat(langfuse): support langfuse_environment as a per-key dynamic callback param by @devin-ai-integration[bot] in #38264
feat(proxy): hide unhealthy models from model listings, opt-in by @yuneng-berri in #38313
fix(mcp): honor admin-entered OAuth URLs on authorize after issuer yield by @mateo-berri in #38379
fix(model_prices): correct gemini-3.5-flash-lite flex cache-read pricing by @mateo-berri in #38422
fix(cost): price gemini-live-2.5-flash-native-audio realtime sessions by @mateo-berri in #38419
fix(cost-map): correct Gemini TTS and native-audio rates by @mateo-berri in #38412
fix(prompts): propagate PATCHed prompt templates to every worker and pod by @mateo-berri in #38411
fix(model_prices): bill gemini -latest/preview alias cache reads at 10% of input by @mateo-berri in #38423
fix(proxy): sync search tools into the router on management writes by @yuneng-berri in #38392
feat(guardrails): track Azure Prompt Shield usage and cost with spend isolation by @yucheng-berri in #38387
fix(prompts): apply prompt templates before routing on /v1/responses and honor ignore_prompt_manager_model by @mateo-berri in #38407
fix(cost): make cost-breakdown headers respect service tier by @mateo-berri in #38424
fix(mcp): add litellm[mcp] extra and actionable error when streamable_http_client is missing by @mateo-berri in #38399
revert(proxy): remove router_model_name from auto-routed response bodies by @tin-berri in #38429
fix(google_genai): price streamed generateContent with the provider that served it by @devin-ai-integration[bot] in #36055
fix(logging): stop billing and logging response reads as LLM calls by @devin-ai-integration[bot] in #36890
fix(budget): serialize model_max_budget before the /budget/update write by @yuneng-berri in #38430
fix(ui): block the auto-router submit on a missing classifier model and an orphaned keyword rule by @tin-berri in #38427
feat(complexity_router): heuristic-first classifier chaining by @tin-berri in #38428
test(e2e): un-skip the per-model budget update case by @yuneng-berri in #38437
fix(cost): stop double-billing cached tokens that overlap a modality by @Srivatsa03 in #37407
feat(ui): add Teams list CSV export with budgets, model grants, and rate limits by @devin-ai-integration[bot] in #38436
fix(mcp): accept raw x-litellm-api-key on streamable HTTP admission by @devin-ai-integration[bot] in #38364
fix: bound row count on GET /spend/logs to stop unbounded LiteLLM_SpendLogs scans by @devin-ai-integration[bot] in #38420
fix(scim): apply default_team_params (incl. models) to SCIM-created teams by @devin-ai-integration[bot] in #38433
fix(prompts): propagate prompt deletes to every worker and pod by @mateo-berri in #38434
fix(anthropic_adapter): carry web search cost into /v1/messages breakdown headers by @mateo-berri in #38439
fix(ui): show custom technical keywords on every router whose scorer runs by @tin-berri in #38451
fix(e2e): move the vertex realtime suite off the retired Live preview model by @yuneng-berri in #38454
feat(newrelic): per-team cost and usage metrics via team callbacks by @yucheng-berri in #37610
fix(ui): carry a preset's per-tier litellm_params through the prefill by @tin-berri in #38453
fix(e2e): size the mid-conversation-system cache prefix above the minimum deterministically by @yuneng-berri in #38468
fix(e2e): disable thinking on the gemini chat cost test instead of racing its budget by @yuneng-berri in #38469
feat(ui): put the auto-router savings hero on a spend rail and a four-tile row by @tin-berri in #38470
feat(ui): toggle internal health check visibility in request logs by @mateo-berri in #38391
fix(mcp): canonicalize bearer scheme on bridge egress by @daniel-meismer-zocdoc in #38398
refactor: clean up fresh tech debt from 2026-08-27 window by @devin-ai-integration[bot] in #38484
fix(exception_mapping_utils): map unmapped exceptions when model and provider are unset by @mateo-berri in #38496
fix(ui_sso): resolve highest privilege Entra app role, not first in claim by @imranismail in #36728
fix(proxy): regenerate lazy OpenAPI snapshot and guard it in CI by @mateo-berri in #38410
feat(ui): add cache hit/miss filter to Request Logs by @devin-ai-integration[bot] in #38432
fix(bedrock): sign rerank requests with the shared header-filtered SigV4 helper (internal copy of #36462) by @mateo-berri in #38093
fix(bedrock): sign rerank requests with the shared, header-filtered SigV4 helper by @noahnistler in #36462
fix(ui): order the auto-routers table newest first so a new router lands on page one by @tin-berri in #38545
feat(ui): run the Anthropic Family preset's reasoning tier on Opus 5 at high thinking by @tin-berri in #38490
build(ui): bump nginx to 1.31-alpine by @devin-ai-integration[bot] in #38541
feat(otel): support per-team/per-key service.name for OTel v2 destinations by @devin-ai-integration[bot] in #38532
test(e2e): de-flake the cost-header cache read and the router fallback control by @yuneng-berri in #38435
feat(gemini): day-0 support for gemini-3.5-transcribe and transcribe-live by @mateo-berri in #38540
feat(health): opt-in model-group allowlist for background health checks and health-check routing by @mateo-berri in #38539
fix(mcp): keep upstream OAuth Authorization when jwt signer hook injects one on tools/call by @devin-ai-integration[bot] in #38555
fix: suppress misleading register_model unresolved-cost warnings for entries without custom pricing by @devin-ai-integration[bot] in #38542
feat(proxy): opt-in budget rollover carrying overage into the next window by @devin-ai-integration[bot] in #38514
fix(auth): skip guaranteed-miss team lookup for the litellm-dashboard sentinel by @devin-ai-integration[bot] in #38471
fix(key_management): allow /key/update to keep or shrink MCP server grants the key already holds by @devin-ai-integration[bot] in #38463
fix: keep schema reconciliation from fighting a partitioned LiteLLM_SpendLogs by @devin-ai-integration[bot] in #38452
fix(ui): open select popups below the trigger instead of over it by @tin-berri in #38554
fix(realtime): bill trailing audio when a Gemini transcribe Live session closes by @mateo-berri in #38563
test(e2e): cover key generate and update on the Admin UI path by @yuneng-berri in #38448
chore: bump litellm-enterprise 0.1.60 -> 0.1.61, litellm-proxy-extras 0.4.89 -> 0.4.90 by @yuneng-berri in #38566
fix(ui): let the paginated search select keep what the user types by @yuneng-berri in #38475
fix(otel): anchor MCP tool-call spans to the gateway's own trace, link the client's context by @yucheng-berri in #38317
fix: roll up the open deflake fixes for the MCP logging queue, PTU rollup, license gate, and pricing test isolation by @devin-ai-integration[bot] in #37833
fix(model_prices): rolling registry audit - verified models and rates for Novita, DeepInfra, W&B, Bedrock Sol, Gemini, Fireworks, Azure gpt-5.6, Mistral, Together by @devin-ai-integration[bot] in #38207
test(together_ai): assert fail-open supported params for models missing from the registry by @mateo-berri in #38487
test(e2e): let the together tool tests accept parallel calls by @yuneng-berri in #38567
feat(mcp): let a resolved OAuth token target a custom upstream header by

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

The current star history chart is broken because the upstream API relies on the GitHub stargazer API, which is now rate-limited. Update the chart to use a working endpoint so the star history renders correctly.