v1.108.6

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. This release is signed with the key introduced in commit e82a3c6.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the published signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/e82a3c646908ba0a6ee0beddc4310d7a6cac4065/cosign.pub \
  ghcr.io/berriai/litellm:v1.108.6

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.108.6/cosign.pub \
  ghcr.io/berriai/litellm:v1.108.6

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• test: backport stale integration test fixes to lts/1.108.x by @yuneng-berri in #51064
• fix(tool_choice): backport #49043 and #50467 to lts/1.108.x by @mika-lt in #50726
• fix(proxy): backport idempotent budget resets to lts/1.108.x (#50298) by @paveln83 in #51120
• fix(zscaler_ai_guard)!: backport #50139 to lts/1.108.x by @yucheng-berri in #50435
• fix(usage): restore per-user spend breakdown on the user aggregated route (#49464) [lts/1.108.x] by @yassin-berriai in #51043
• fix(responses): backport #50968 and #51038 to lts/1.108.x by @kerry-berri in #51122
• fix(mcp): backport #50717 and #51065 to lts/1.108.x by @shrey-berri in #51045
• chore: bump litellm to 1.108.6 on lts/1.108.x by @yucheng-berri in #51217
• fix(usage): backport #50253 to lts/1.108.x by @yucheng-berri in #51229
• fix(ci): backport the tzdata CI dependency (#51057) to lts/1.108.x by @mateo-berri in #51240
• security(proxy): backport #51254 to lts/1.108.x by @shrey-berri in #51260

Full Changelog: v1.108.5...v1.108.6