• See full diff in compare view

Sourced from litellm's releases.

v1.99.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.99.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• chore(typing): drop 1.3k basedpyright errors across 30 Any hotspot files by @​mateo-berri in BerriAI/litellm#37073
• fix(proxy): register WebSocket passthrough for OpenAI prefixes by @​LHMQ878 in BerriAI/litellm#36151
• fix(bedrock): report uploaded size in the FileObject returned by managed batch uploads by @​devin-ai-integration[bot] in BerriAI/litellm#36392
• fix(batches): support AWS Bedrock batch cancellation via StopModelInvocationJob by @​ArjunPakhan in BerriAI/litellm#34087
• feat: Async Rust OCR Bridge and MCP OAuth UI Restore by @​ArjunPakhan in BerriAI/litellm#31453
• fix(batches): don't crash logging when a completed batch has no output file by @​MUSE-CODE-SPACE in BerriAI/litellm#34067
• fix(UI): add default model pin to complexity router UI by @​tin-berri in BerriAI/litellm#36615
• feat(ui): add Lite mixed-provider auto-router preset by @​tin-berri in BerriAI/litellm#37068
• feat(ui): link key info header to its user, creator, team, and organization by @​ryan-crabbe-berri in BerriAI/litellm#37187
• fix(guardrails): scan text on /guardrails/apply_guardrail for Azure Content Safety by @​yucheng-berri in BerriAI/litellm#36894
• feat(bedrock): forward LiteLLM identity and metadata into Bedrock requestMetadata by @​yassin-berriai in BerriAI/litellm#36861
• fix(azure): rename max_tokens to max_completion_tokens for gpt-5-chat deployments by @​yassin-berriai in BerriAI/litellm#36857
• fix(bedrock): preserve cache token usage when invocationMetrics replace the usage block by @​brian5021 in BerriAI/litellm#36878
• fix(proxy): registry caches stop per-request tag and end-user Postgres reads in auth by @​ryan-crabbe-berri in BerriAI/litellm#36801
• test(e2e): replay a real tool-search assistant turn back to Bedrock Invoke by @​yassin-berriai in BerriAI/litellm#36856

... (truncated)

• fa647f7 Merge pull request #39048 from BerriAI/litellm_/docker-build-failure-9f6247
• 5892e30 fix(docker): pin apk python to 3.13 in migrations image
• 91f1a57 fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13
• d0c8667 Merge pull request #38862 from BerriAI/litellm_/litellm-e2e-rc-1-99-0-11cfd8
• da1d292 test(e2e): measure the select popup after it settles instead of mid-flight
• a2aecfe fix(e2e): only the negative fallback assertion needs every replica to agree
• ab1da05 test(e2e): de-flake the cost-header cache read and the router fallback control
• 1411852 Merge pull request #38855 from BerriAI/litellm_/backport-38251-rc-1-99-0
• f0ee067 fix(anthropic): translate tool_result document blocks in the /v1/messages bridge
• 4b281e7 Merge pull request #38854 from BerriAI/litellm_backport_model_test_dialog_str...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions