Verify Docker Image Signature
All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.
Verify using the pinned commit hash (recommended):
A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
ghcr.io/berriai/litellm:v1.83.13-nightlyVerify using the release tag (convenience):
Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/v1.83.13-nightly/cosign.pub \
ghcr.io/berriai/litellm:v1.83.13-nightlyExpected output:
The following checks were performed on each of these signatures:
- The cosign claims were validated
- The signatures were verified against the specified public key
What's Changed
- merge main by @Sameerlite in #26258
- [Fix] Align image URL fetch with validated HTTP client in Bedrock and token counter paths by @yuneng-berri in #26272
- [Fix] Extend request body parameter restrictions to cloud provider auth fields by @yuneng-berri in #26264
- [Fix] Enforce format constraints on provider URL parameters by @yuneng-berri in #26287
- fix(mcp_semantic_tool_filter): match tools with client-side namespace prefix (#26078) by @sakenuGOD in #26117
- fix(adapter): normalize reasoning effort with graceful degradation by @Vigilans in #26111
- fix(anthropic): skip non-OpenAI file content blocks in file-id discovery helpers by @anmolg1997 in #26228
- feat(messages): map reasoning_auto_summary to thinking.display for native /v1/messages by @Vigilans in #25883
- fix(ovhcloud): Fix tool calling not working by @eliasto in #25948
- fix(anthropic): handle tool_choice type 'none' in messages API by @BillionClaw in #24457
- fix(ui): Fetch button ignores active filters on Request Logs page by @Bytechoreographer in #25788
- fix(ui): stale filters applied after sort/page/time change on Request… by @Bytechoreographer in #25789
- refactor: replace substring check with startswith in is_model_gpt_5_model by @BraulioV in #25793
- Feat(dashscope): add image generation support for qwen-image-2.0 and qwen-image-2.0-pro by @Alpha-Zark in #25672
- fix(image_edit): forward litellm_params to validate_environment for Vertex AI credentials by @Sameerlite in #26160
- feat: Expand VideoMetadata support to all Gemini Models. by @vinhphamhuu-ct in #25767
- Litellm oss staging 04 22 2026 by @krrish-berri-2 in #26300
- [Infra] CCI: cache, cleanup, anchors, install-path parity, Python 3.12, Ruby/Node pins by @yuneng-berri in #26286
- [Fix] Image edit endpoints: enforce multipart-only file inputs by @yuneng-berri in #26293
- [IInfra] Merge dev branch by @yuneng-berri in #26336
- feat: add gpt-5.5 to model cost map by @mateo-berri in #26345
- [Infra] Add standalone create-release-branch workflow by @yuneng-berri in #26342
- feat: add gpt-5.5 to model cost map by @mateo-berri in #26348
- Fix bugs that bypasses per-team member budget limit by @Michael-RZ-Berri in #26204
- [Fix] Tests - drain logging worker in test_router_caching_ttl to fix flakiness by @yuneng-berri in #26355
- feat(vertex_ai): multi-region Vertex hosts (aiplatform.*.rep.googleapis.com) by @milan-berri in #26281
- [Fix] Infra: grant contents:write to create-release-branch caller job by @yuneng-berri in #26359
- [Fix] Deflake spend tracking tests by @yuneng-berri in #26349
- fix(proxy): share temporary MCP OAuth sessions across instances via Redis by @milan-berri in #26318
- [Fix] Reset budget windows failing due to Prisma Json? null filter by @yuneng-berri in #26346
- Surface per-member budget cycle in Teams > Members tab by @ryan-crabbe-berri in #26207
- [Infra] Bump version 1.83.12 → 1.83.13 by @yuneng-berri in #26370
- [Infra] Promote internal staging to main by @yuneng-berri in #26375
New Contributors
- @sakenuGOD made their first contribution in #26117
- @Vigilans made their first contribution in #26111
- @anmolg1997 made their first contribution in #26228
- @Bytechoreographer made their first contribution in #25788
- @BraulioV made their first contribution in #25793
- @Alpha-Zark made their first contribution in #25672
- @vinhphamhuu-ct made their first contribution in #25767
Full Changelog: v1.83.12-nightly...v1.83.13-nightly