v1.99.0-rc.2

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0-rc.2

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.99.0-rc.2/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0-rc.2

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(ui): backport the shadcn migration regression fixes onto 1.99.0 by @yuneng-berri in #38821
• fix(e2e): backport the vertex realtime and vision image fixture fixes to rc/1.99.0 by @yuneng-berri in #38848
• fix(ui): drop stray text next to Close in the model connection test dialog by @yuneng-berri in #38854
• [Backport rc/1.99.0] fix(anthropic): translate tool_result document blocks in the /v1/messages bridge by @yuneng-berri in #38855
• test(e2e): backport the select-anchoring and router-fallback spec de-flakes by @yuneng-berri in #38862

Full Changelog: v1.99.0-rc.1...v1.99.0-rc.2