ci: Add litellm to uv typing group

[alexander-alderman-webb]

Description

Add litellm to the typing dependency group and fix the resulting mypy errors.

Resolve

sentry_sdk/integrations/litellm.py:28: error: Unused "type: ignore" comment  [unused-ignore]

Issues

Reminders

• Please add tests to validate your changes, and lint your code using uv run ruff.
• Add GH Issue ID & Linear ID (if applicable)
• PR title should use conventional commit style (feat:, fix:, ref:, meta:)
• For external contributors: CONTRIBUTING.md, Sentry SDK development docs, Discord community

[socket-security]

Warning

Socket is a tool Sentry Security team deployed to defend against supply chain attack. Please provide any feedback you have in #discuss-security slack channel ❤️

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Critical CVE: LiteLLM: Authentication Bypass via Host Header Injection CVE: GHSA-4xpc-pv4p-pm3w LiteLLM: Authentication Bypass via Host Header Injection (CRITICAL) Affected versions: < 1.84.0 Patched version: 1.84.0 From: pyproject.toml → pypi/litellm@1.83.0 ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore pypi/litellm@1.83.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Critical CVE: LiteLLM has SQL Injection in Proxy API key verification CVE: GHSA-r75f-5x8p-qvmc LiteLLM has SQL Injection in Proxy API key verification (CRITICAL) Affected versions: >= 1.81.16 < 1.83.7 Patched version: 1.83.7 From: pyproject.toml → pypi/litellm@1.83.0 ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore pypi/litellm@1.83.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[github-actions]

Codecov Results 📊

✅ 130596 passed | ⏭️ 7110 skipped | Total: 137706 | Pass Rate: 94.84% | Execution Time: 476m 46s

📊 Comparison with Base Branch

Metric	Change
Total Tests	—
Passed Tests	📈 +1
Failed Tests	📉 -1
Skipped Tests	—

➖ Removed Tests (1)

View removed tests

• test_segment_uses_downsampled_rate
  • File: tests.test_monitor

All tests are passing successfully.

✅ Patch coverage is 100.00%. Project has 2509 uncovered lines.
❌ Project coverage is 90.25%. Comparing base (b71a773) to head (ea00682).

Coverage diff

@@            Coverage Diff             @@
##        master       #PR       +/-##
==========================================
- Coverage    90.28%    90.25%    -0.03%
==========================================
  Files          193       193         —
  Lines        25724     25724         —
  Branches      9504      9504         —
==========================================
+ Hits         23222     23215        -7
- Misses        2502      2509        +7
- Partials      1433      1433         —

---

Generated by Codecov Action

[alexander-alderman-webb]

We're just type checking with litellm, #7393 (comment) is not relevant.