Verify Docker Image Signature
All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.
Verify using the pinned commit hash (recommended):
A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
ghcr.io/berriai/litellm:v1.92.0-rc.1Verify using the release tag (convenience):
Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/v1.92.0-rc.1/cosign.pub \
ghcr.io/berriai/litellm:v1.92.0-rc.1Expected output:
The following checks were performed on each of these signatures:
- The cosign claims were validated
- The signatures were verified against the specified public key
What's Changed
- feat(mcp): add all-proxy-mcpservers sentinel to grant teams every MCP server by @ryan-crabbe-berri in #32012
- fix(anthropic): keep context_management working when drop_params is enabled by @mateo-berri in #32020
- fix(ci): stop ui_unit_tests vitest onTaskUpdate RPC timeout flake by @yuneng-berri in #32078
- chore: clarify the linear ticket instruction in pr template by @mateo-berri in #32076
- test(ui): quiet vitest CI logs by silencing passing-test console output by @yuneng-berri in #32079
- fix: prevent duplicate budget alert emails on concurrent threshold crossings by @yucheng-berri in #32011
- chore(ui): add no-console lint ratchet and strip console from prod builds by @yuneng-berri in #32082
- feat(guardrails): add unreachable_fallback fail-open option to headroom guardrail by @krrish-berri-2 in #32026
- feat(ui): add budget fallbacks configuration to key create/edit forms by @devin-ai-integration[bot] in #32072
- feat(mcp): migrate the token_exchange (OBO) arm to the v2 resolver by @tin-berri in #31526
- feat(mcp): make token_exchange (OBO) production-ready - discovery threading + audit hardening + RFC 9728 challenge by @tin-berri in #31622
- fix(anthropic): bill streaming 1h prompt-cache writes at the 1h rate by @mateo-berri in #32073
- chore(ui): remove debug console.log statements from dashboard by @ryan-crabbe-berri in #32087
- fix(router): mask provider credentials embedded in fallback error messages by @yucheng-berri in #32083
- revert: undo teamless all-team-models denial from #32022 and #29746 by @devin-ai-integration[bot] in #32032
- feat(mcp): discover the OBO token endpoint via RFC 9728 -> RFC 8414 (no IdP guessing) by @tin-berri in #31762
- fix(proxy): route realtime HTTP endpoints through router for credenti… by @shivamrawat1 in #32077
- feat(ui): migrate chat UI from antd to shadcn/ui + add key management and usage panels by @devin-ai-integration[bot] in #32074
- fix(ci): exclude deleted files from ruff format check by @yuneng-berri in #31462
- fix(proxy): stop leaking master_key and database_url in startup DEBUG logs by @yucheng-berri in #31944
- fix(policies): reject non-existent team/key/model scope entries on attachment create by @ryan-crabbe-berri in #32131
- fix(anthropic): require caller api_key and SSRF-validate api_base in advisor tool by @yucheng-berri in #32093
- fix(proxy): keep serving reads from the read replica when the primary DB is down at startup by @yassin-berriai in #31951
- build: restore maturin backend to bundle the Rust bridge in the wheel by @yuneng-berri in #32097
- fix(cost): store cost breakdown for /v1/realtime sessions by @shivamrawat1 in #30069
- fix(proxy): return upstream error bodies unchanged in passthrough by @shivamrawat1 in #32133
- ci: run proxy containers without debug logging by @ryan-crabbe-berri in #32128
- bump: litellm-enterprise 0.1.46 -> 0.1.47 by @yuneng-berri in #32150
- chore(ci): build ui for release by @yuneng-berri in #32151
- feat(prometheus): add api_provider label to token, latency, request and cache metrics by @yucheng-berri in #32126
- chore(ci): promote internal staging to main by @yuneng-berri in #32156
Full Changelog: v1.92.0-dev.2...v1.92.0-rc.1