iframe-proxy

alexander-alderman-webb · 2026-09-04T14:10:29Z

Description

Add litellm to the typing dependency group and fix the resulting mypy errors.

Resolve

sentry_sdk/integrations/litellm.py:28: error: Unused "type: ignore" comment  [unused-ignore]

Issues

Reminders

Please add tests to validate your changes, and lint your code using uv run ruff.
Add GH Issue ID & Linear ID (if applicable)
PR title should use conventional commit style (feat:, fix:, ref:, meta:)
For external contributors: CONTRIBUTING.md, Sentry SDK development docs, Discord community

socket-security · 2026-09-04T14:11:00Z

Warning

Socket is a tool Sentry Security team deployed to defend against supply chain attack. Please provide any feedback you have in #discuss-security slack channel ❤️

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Critical CVE: LiteLLM: Authentication Bypass via Host Header Injection CVE: GHSA-4xpc-pv4p-pm3w LiteLLM: Authentication Bypass via Host Header Injection (CRITICAL) Affected versions: < 1.84.0 Patched version: 1.84.0 From: pyproject.toml → `pypi/litellm@1.83.0` ℹ Read more on: This package \| This alert \| What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore pypi/litellm@1.83.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Critical CVE: LiteLLM has SQL Injection in Proxy API key verification CVE: GHSA-r75f-5x8p-qvmc LiteLLM has SQL Injection in Proxy API key verification (CRITICAL) Affected versions: >= 1.81.16 < 1.83.7 Patched version: 1.83.7 From: pyproject.toml → `pypi/litellm@1.83.0` ℹ Read more on: This package \| This alert \| What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore pypi/litellm@1.83.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

github-actions · 2026-09-04T14:21:48Z

Codecov Results 📊

✅ 130596 passed | ⏭️ 7110 skipped | Total: 137706 | Pass Rate: 94.84% | Execution Time: 476m 46s

📊 Comparison with Base Branch

Metric	Change
Total Tests	—
Passed Tests	📈 +1
Failed Tests	📉 -1
Skipped Tests	—

➖ Removed Tests (1)

View removed tests

test_segment_uses_downsampled_rate
- File: tests.test_monitor

All tests are passing successfully.

✅ Patch coverage is 100.00%. Project has 2509 uncovered lines.
❌ Project coverage is 90.25%. Comparing base (b71a773) to head (ea00682).

Coverage diff

@@            Coverage Diff             @@
##        master       #PR       +/-##
==========================================
- Coverage    90.28%    90.25%    -0.03%
==========================================
  Files          193       193         —
  Lines        25724     25724         —
  Branches      9504      9504         —
==========================================
+ Hits         23222     23215        -7
- Misses        2502      2509        +7
- Partials      1433      1433         —

Generated by Codecov Action

alexander-alderman-webb · 2026-09-04T14:54:09Z

ci: Add litellm to uv typing group

eea9f83

alexander-alderman-webb requested a review from a team as a code owner September 4, 2026 14:10

merge

36eb252

alexander-alderman-webb changed the base branch from master to webb/tiktoken-types September 4, 2026 14:46

merge

ea00682

alexander-alderman-webb changed the base branch from webb/tiktoken-types to webb/aiohttp-types September 4, 2026 14:53

Sunbelt Computer Software

PL/B Language Development and Support

Navigation Menu

Uh oh!

ci: Add `litellm` to uv typing group - #7393

ci: Add `litellm` to uv typing group#7393
alexander-alderman-webb wants to merge 3 commits into
webb/aiohttp-typesfrom
webb/litellm/mypy

alexander-alderman-webb commented Sep 4, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 4, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 4, 2026 •

edited

Loading

Uh oh!

alexander-alderman-webb commented Sep 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Sunbelt Computer Software

PL/B Language Development and Support

Uh oh!

Conversation

alexander-alderman-webb commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Issues

Reminders

Uh oh!

socket-security Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Results 📊

📊 Comparison with Base Branch

➖ Removed Tests (1)

Uh oh!

alexander-alderman-webb commented Sep 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

alexander-alderman-webb commented Sep 4, 2026 •

edited

Loading

socket-security Bot commented Sep 4, 2026 •

edited

Loading

github-actions Bot commented Sep 4, 2026 •

edited

Loading