BerriAI/litellm v1.110.0-rc.1 on GitHub

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. This release is signed with the key introduced in commit e82a3c6.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the published signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.110.0-rc.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.110.0-rc.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.110.0-rc.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

fix(completion): accept a tool_choice that forces an OpenAI hosted tool by @kerry-berri in #50578
fix(accounting): stop delivery metrics from scanning retained receipts on every flush by @joshua-berri in #50565
fix(key/info): return 400 instead of 500 when no key is provided by @apex-mochen in #43577
fix(gemini): add the Flex above-200k cache read price to gemini-3.1-pro-preview rows by @devin-ai-integration[bot] in #50607
test(observability): match the full card number instead of a 4111 substring that timestamps can contain by @devin-ai-integration[bot] in #50612
fix(proxy): align ownership and scope handling by @mateo-berri in #50600
feat(proxy): total_timeout bounds a whole non-streaming request by @joshua-berri in #50496
fix(cli): end the local login when lite logout cannot check the OS keychain by @zoveki in #50098
fix(ui): label every budget reset time in the Admin UI with UTC by @zoveki in #50591
fix(proxy)!: price expanded wildcard /model/info rows as the model their calls route to by @paveln83 in #49128
fix(bedrock): derive the web identity session policy per AWS caller by @tavren27 in #50592
perf(router): skip unused deployment reads in the callback filter step and cache anthropic capability probes by @narmstrong-berri in #50641
test: update stale integration expectations and backport the Together e2e repin (#50601) by @yuneng-berri in #50756
test(integration): drop the empty-string n case from the Gemini long decode test by @yuneng-berri in #50794
test: update the spend tests that still expected the pre-ledger accounting queues by @yuneng-berri in #50805
fix(router): backport the mid-stream request fallback fix (#50260) to rc/1.110.0 by @yuneng-berri in #50798
test: repair four integration tests on rc/1.110.0 by @yuneng-berri in #50855
fix(redis): backport the per-request Redis batch scope leak fix (#50751) to rc/1.110.0 by @narmstrong-berri in #50949
fix(router): backport the registry lock fix (#50933) to rc/1.110.0 by @yuneng-berri in #50993

New Contributors

@apex-mochen made their first contribution in #43577

Full Changelog: v1.110.0-dev.2...v1.110.0-rc.1