v1.101.0-dev.1

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.101.0-dev.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.101.0-dev.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.101.0-dev.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(proxy): emit timing headers and overhead for /v1/messages and /v1/responses by @yucheng-berri in #38840
• fix(tests): derive the no-cache-read-rate savings baseline from the model map by @tin-berri in #38863
• chore(typing): clear Any seams across 47 files, ratchet basedpyright ceilings -3,302 by @mateo-berri in #37778
• chore(typing): clear 1.2k basedpyright Any errors across 16 hotspot files by @mateo-berri in #36722
• feat(bedrock): honor streaming buffer/sampling config for unbuffered post_call scans by @mateo-berri in #38722
• feat(cli): set ENABLE_TOOL_SEARCH=true for lite claude by @mateo-berri in #38942
• fix(proxy): deliver budget alerts on webhook-only alerting and accept ALERTING_WEBHOOK_URL by @devin-ai-integration[bot] in #38441
• docs(claude.md): require tests to check behavior, not code structure by @ryan-crabbe-berri in #38772
• chore(newrelic): cover static default_team_settings per-team routing by @yucheng-berri in #38857
• fix: update stale source URLs and deprecation dates in model cost map by @devin-ai-integration[bot] in #38801
• feat(ci): close duplicate issues after a 3-day grace period by @mubashir1osmani in #38381
• docs(proxy): clarify spend semantics on /v2/user/info and /user/daily/activity by @devin-ai-integration[bot] in #38883
• fix(guardrails): configure Prompt Security file timeout policy by @davida-ps in #38083
• fix(bedrock): stop duplicating Converse config blocks inside inferenceConfig by @mateo-berri in #38993
• fix(guardrails): exclude images from HiddenLayer v1 scans by @Ashton-Sidhu in #29210
• feat(spend_tracking): persist router metadata in spend logs for internal router models by @mateo-berri in #39001
• fix(vertex_ai): graft default vertex path when api_base has a version-only path by @devin-ai-integration[bot] in #38986
• fix(proxy): allow unblocking customers via /customer/update by @cat0825 in #34696
• feat(openai): support workload identity federation (OIDC token exchange) by @mateo-berri in #38995
• fix(otel): emit cache token counts on OTel v2 LLM spans by @devin-ai-integration[bot] in #38716
• feat(proxy): add /v1/responses/input_tokens token counting endpoint by @mateo-berri in #38997
• fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13 by @mateo-berri in #38917
• fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13 in migrations image by @mateo-berri in #38973
• feat(friendli): add zai-org/GLM-5.3-Flash model pricing by @Lee-Si-Yoon in #38880
• chore(techdebt): clear fresh debt from the 2026-08-29 and 2026-08-30 windows by @devin-ai-integration[bot] in #38884
• fix(bedrock): surface Nova Sonic user transcripts, speech events, and usage in realtime API by @devin-ai-integration[bot] in #38597
• fix(guardrails): carry Anthropic url image sources through to guardrails by @samtsai15 in #38940
• feat(friendli): add zai-org/GLM-5.3 model pricing by @Lee-Si-Yoon in #38881
• fix(router): apply model renames to the in-memory deployment list by @yatishgoel in #38479
• test(e2e): cover SCIM token creation and SCIM API auth in the Admin UI suite by @yuneng-berri in #39027
• feat(gigachat): add native API passthrough routes with spend logging by @mateo-berri in #38913
• feat(gigachat): add passthrough gigachat route by @KnyazSh in #25886
• feat(complexity-router): add classification_mode to skip classifier on continuation turns by @tin-berri in #38861
• fix(proxy): preserve model table columns on master key rotation by @mateo-berri in #38878
• fix(speech): stop forwarding response_format as a chat param for Gemini TTS by @mateo-berri in #38819
• fix(proxy): return 200 from /model/block and /model/unblock instead of 500 by @mateo-berri in #38873
• feat(complexity_router): escalate oversized prompts to a tier that fits before dispatch by @tin-berri in #38844
• feat(shadow_eval): target teams and users so JWT-auth traffic can be evaluated by @tin-berri in #39015
• fix(anthropic_messages): drain upstream in a detached pump so client … by @nuernber in #36008
• refactor(proxy): bound the budget window seed by time instead of request ids by @ryan-crabbe-berri in #38851
• fix(proxy): ship psycopg so partitioned SpendLogs detection actually runs by @yassin-berriai in #38994
• test(e2e): assert user-observable behavior instead of DOM structure by @yuneng-berri in #39016
• build(rust): configure native extension profiles by @yujonglee-berri in #39020
• fix(ui): keep litellm_credential_name from LiteLLM Params JSON when no credential is selected by @devin-ai-integration[bot] in #39005
• Revert "fix(ui): keep litellm_credential_name from LiteLLM Params JSON when no credential is selected" by @yassin-berriai in #39046
• fix(auth): quiet malformed virtual key rejections to stdout by @yucheng-berri in #38838
• fix(proxy): wire team-level logging callbacks into passthrough endpoints by @yucheng-berri in #38979
• feat(complexity_router): opt-in modality-based capability routing for image requests by @tin-berri in #39032
• fix(ui): let the auto-router scoring tier list follow the theme by @tin-berri in #39040
• feat(ui): auto-router controls for context-window escalation by @tin-berri in #39054
• fix(redis): coerce env var string types and fix param discovery through decorator wrappers by @koladefaj in #30644
• feat(key management): show budget window usage on /key/info by @Thijmen in #37044
• fix(websearch): reject invalid explicit search tool selections by @georgeatparallel in #38113
• feat(shadow_eval): compare several auto-routers on one job's sampled traffic by @tin-berri in #39028
• fix(speech): honor pcm/wav response_format for Gemini TTS and reject unsupported containers by @mateo-berri in #38868
• fix(proxy): match /v1/audio/speech content-type to the returned audio format by @mateo-berri in #38798
• test(e2e): drop the two mgmt registry cells no shared-proxy test can cover by @ryan-crabbe-berri in #39055
• feat(ui): one classification frequency picker for complexity auto-routers by @tin-berri in #39042
• test(e2e/ui): automate 8 manual QA checklist flows by @yuneng-berri in #39025
• fix(key_management): allow non-admin key_type preset transitions on /key/update by @yuneng-berri in #39051
• chore(typing): clear 1.1k basedpyright Any errors across 53 backend files by @mateo-berri in #38796
• fix(openai): forward reasoning_effort for unknown model aliases instead of failing closed by @mateo-berri in #39065
• test(e2e-ui): poll credential availability before Test Connect to deflake multi-instance runs by @yuneng-berri in #39073
• feat(ui): modality routing toggle on the auto-router create and edit forms by @tin-berri in #39059
• fix(proxy): include litellm_model_table in GET /v2/team/list by @yassin-berriai in #39045
• fix(bedrock): mask signed request headers in guardrail debug log by @mateo-berri in #39044
• fix(bedrock): forward aws_external_id in files and batches credential loading by @mateo-berri in #39066
• fix(mcp): persist alias MCP grants verbatim instead of rewriting to local server ids by @ryan-crabbe-berri in #39119
• fix(responses): json-encode object tool call arguments in the chat completions bridge by @devin-ai-integration[bot] in #35417
• fix(cost): bill OCR annotation pages via annotation_cost_per_page by @mateo-berri in #38985
• fix(policy_engine): restore request guardrails list after pipeline allow by @mateo-berri in #39038
• fix(embeddings): omit encoding_format when the client omits it on OpenAI-compatible calls by @mateo-berri in #38774
• test: deflake MCP registry state, savings cost map, and MCP identity env reload tests by @devin-ai-integration[bot] in #38891
• feat(helm): add Argo CD PreSync hook and rollout strategy knobs to the componentized chart by @devin-ai-integration[bot] in #39112
• fix(registry): veo 3.1 pricing tiers + roll up open registry PRs (glm-5.2, Qwen3.8-Flash, gemma-4-31b, scribe_v2, fireworks/databricks deepseek v4) + deprecation dates by @devin-ai-integration[bot] in #38990
• test(ui): budget DOM-structure assertions in dashboard tests by @yuneng-berri in #39082
• test(ui): assert DataTable behavior instead of DOM structure by @yuneng-berri in #39084
• test(ui): query the screen instead of the render result by @yuneng-berri in #39085
• fix(ui): stop checkboxes stretching to the full width of a form field by @yatishgoel in #39108
• chore: bump litellm-enterprise 0.1.62 -> 0.1.63, litellm-proxy-extras 0.4.91 -> 0.4.92, litellm 1.100.0 -> 1.101.0 by @yuneng-berri in #39140
• revert: restore search tool fallback when no router is configured by @yuneng-berri in #39146
• test(websearch): register configured search tool in pre-request hook test by @mateo-berri in #39074
• feat(proxy): default to the v2 migration resolver, keep v1 as an opt-out by @yuneng-berri in #31125
• build(deps): bump browserslist to 4.28.8 to clear osv-scan by @devin-ai-integration[bot] in #39142
• fix(ui): render the skill detail page with theme tokens by @yuneng-berri in #39130
• feat: add Azure AI DeepSeek V4 Flash 0731 pricing by @yujonglee-berri in #39023
• fix(streaming): keep response id stable across streamed chunks by @Timik232 in #38106
• test(e2e/ui): cover the Budgets page create, edit and delete flows by @yuneng-berri in #39052
• feat(dashscope): add QwenCloud and Qwen AI Platform provider aliases by @mateo-berri in #39149
• fix(bedrock): forward native structured outputs on Invoke instead of silently inlining the schema by @tin-berri in #39070
• test(e2e/ui): cover creating, testing and deleting a guardrail by @yuneng-berri in #39053
• refactor(types): replace Any with precise types across 73 modules by @mateo-berri in #39104
• feat(models): add Claude Fable 5.1 across Anthropic, Bedrock, Vertex AI, and Azure AI by @devin-ai-integration[bot] in #39148
• feat(guardrails): add Alice guardrail by @seanyasno-af in #38898
• test(e2e/ui): cover the Logs page filter drawer by @yuneng-berri in #39056
• test(e2e/ui): stop the suite failing on things that are not regressions by @yuneng-berri in #39063
• test(e2e/ui): cover the team Settings tab by @yuneng-berri in #39058
• test(e2e/ui): cover the Usage page activity tabs by @yuneng-berri in #39061
• fix(ui): render the guardrail garden detail page with theme tokens by @yuneng-berri in #39131
• fix(responses): tool call id shape breaks gpt-5 -> claude fallback conversations by @mateo-berri in #39144
• fix(openai): drop tool_choice when request has no tools on chat completions by @mateo-berri in #39147
• chore(ci): promote internal staging to main by @yuneng-berri in #39141
• test(ui): pick select options by role instead of by text by @yuneng-berri in #39175
• feat(cost): support time-based off-peak pricing in cost calculation by @Srivatsa03 in #31725
• fix(openai): flatten top-level tool schema combinators on chat completions by @mateo-berri in #38839
• fix(s3): bound s3 object keys and download filenames for long Responses API ids by @yucheng-berri in #39164
• revert: default the proxy back to the v1 migration resolver by @yuneng-berri in #39178
• fix(prometheus): bound requested_model label cardinality on client failure paths by @mateo-berri in #39136
• feat(ui): add search to the Agent Hub tab and admin agents table by @ryan-crabbe-berri in #39155
• fix(anthropic): fix response_format for claude-fable-5-1 on Vertex AI and Bedrock by @devin-ai-integration[bot] in #39184
• fix: keep litellm_credential_name from LiteLLM Params JSON and gate stored credential attach to proxy admins by @yassin-berriai in #39047
• chore(ci): promote internal staging to main by @yuneng-berri in #39186

New Contributors

• @cat0825 made their first contribution in #34696
• @Lee-Si-Yoon made their first contribution in #38880
• @samtsai15 made their first contribution in #38940
• @yatishgoel made their first contribution in #38479
• @koladefaj made their first contribution in #30644
• @georgeatparallel made their first contribution in #38113
• @Timik232 made their first contribution in #38106
• @seanyasno-af made their first contribution in #38898

Full Changelog: v1.100.0-rc.1...v1.101.0-dev.1