Verify Docker Image Signature
All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.
Verify using the pinned commit hash (recommended):
A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
ghcr.io/berriai/litellm:1.84.0-dev.1Verify using the release tag (convenience):
Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/1.84.0-dev.1/cosign.pub \
ghcr.io/berriai/litellm:1.84.0-dev.1Expected output:
The following checks were performed on each of these signatures:
- The cosign claims were validated
- The signatures were verified against the specified public key
What's Changed
- fix(redis): cache GCP IAM token to prevent async event loop blocking by @harish-berri in #26441
- litellm oss branch by @krrish-berri-2 in #26386
- fix noma v2 deepcopy crashing in build scan payload - new PR by @omriShukrun08 in #26605
- fix(ui): use stored-credentials endpoint for tools fetch on MCP edit page by @ryan-crabbe-berri in #26002
- feat(proxy): add --timeout_worker_healthcheck flag for uvicorn worker triage by @ryan-crabbe-berri in #26622
- fix(ci): support CircleCI rerun failed tests for local_testing jobs by @mateo-berri in #26461
- docs: update pull_request_template to add Linear ticket mentioning by @mateo-berri in #26655
- fix(pricing): GPT-5.5 Pro Pricing by @lmcdonald-godaddy in #26651
- feat(proxy): Add cleanup job for expired LiteLLM dashboard session keys by @milan-berri in #26460
- fix(ui): move 'Store Prompts in Spend Logs' toggle to Admin Settings by @ryan-crabbe-berri in #26631
- fix(caching): preserve prompt_tokens_details through embedding cache round-trip by @michelligabriele in #26653
- feat(logging): add retry settings for generic API logger by @milan-berri in #26645
- fix(logging): backfill streaming hidden response cost by @milan-berri in #26606
- fix(vertex-ai): reuse anthropic messages config instances by @Sameerlite in #26099
- fix(vertex): preserve items on array branches in anyOf with null + de-flake test by @yuneng-berri in #26675
- fix(tests): replace deprecated Bedrock Claude 3.7 Sonnet model ID by @ryan-crabbe-berri in #26721
- [Fix] Cache LiteLLM_Config param reads in DualCache and batch by @Michael-RZ-Berri in #26469
- [Feat] Lazy-load optional feature routers on first request by @Michael-RZ-Berri in #26534
- [Fix] Unify cost calc in success_handler dict and typed branches by @Michael-RZ-Berri in #26629
- Revert "[Feat] Lazy-load optional feature routers on first request" by @krrish-berri-2 in #26727
- [Infra] Version Bump by @yuneng-berri in #26728
- [Infra] Promote Internal Staging to main by @yuneng-berri in #26731
New Contributors
- @omriShukrun08 made their first contribution in #26605
- @lmcdonald-godaddy made their first contribution in #26651
Full Changelog: v1.83.14.rc.1...1.84.0-dev.1