Skip to content

ci: Add litellm to uv typing group - #7393

Open
alexander-alderman-webb wants to merge 3 commits into
webb/aiohttp-typesfrom
webb/litellm/mypy
Open

ci: Add litellm to uv typing group#7393
alexander-alderman-webb wants to merge 3 commits into
webb/aiohttp-typesfrom
webb/litellm/mypy

Conversation

@alexander-alderman-webb

@alexander-alderman-webb alexander-alderman-webb commented Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Description

Add litellm to the typing dependency group and fix the resulting mypy errors.

Resolve

sentry_sdk/integrations/litellm.py:28: error: Unused "type: ignore" comment  [unused-ignore]

Issues

Reminders

@alexander-alderman-webb
alexander-alderman-webb requested a review from a team as a code owner September 4, 2026 14:10
@socket-security

socket-security Bot commented Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown

Warning

Socket is a tool Sentry Security team deployed to defend against supply chain attack. Please provide any feedback you have in #discuss-security slack channel ❤️

Action Severity Alert  (click "▶" to expand/collapse)
Warn Critical
Critical CVE: LiteLLM: Authentication Bypass via Host Header Injection

CVE: GHSA-4xpc-pv4p-pm3w LiteLLM: Authentication Bypass via Host Header Injection (CRITICAL)

Affected versions: < 1.84.0

Patched version: 1.84.0

From: pyproject.toml → pypi/litellm@1.83.0

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore pypi/litellm@1.83.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: LiteLLM has SQL Injection in Proxy API key verification

CVE: GHSA-r75f-5x8p-qvmc LiteLLM has SQL Injection in Proxy API key verification (CRITICAL)

Affected versions: >= 1.81.16 < 1.83.7

Patched version: 1.83.7

From: pyproject.toml → pypi/litellm@1.83.0

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore pypi/litellm@1.83.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@github-actions

github-actions Bot commented Sep 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Codecov Results 📊

✅ 130596 passed | ⏭️ 7110 skipped | Total: 137706 | Pass Rate: 94.84% | Execution Time: 476m 46s

📊 Comparison with Base Branch

Metric Change
Total Tests —
Passed Tests 📈 +1
Failed Tests 📉 -1
Skipped Tests —

➖ Removed Tests (1)

View removed tests
  • test_segment_uses_downsampled_rate
    • File: tests.test_monitor

All tests are passing successfully.

✅ Patch coverage is 100.00%. Project has 2509 uncovered lines.
❌ Project coverage is 90.25%. Comparing base (b71a773) to head (ea00682).

Coverage diff 
@@            Coverage Diff             @@
##        master       #PR       +/-##
==========================================
- Coverage    90.28%    90.25%    -0.03%
==========================================
  Files          193       193         —
  Lines        25724     25724         —
  Branches      9504      9504         —
==========================================
+ Hits         23222     23215        -7
- Misses        2502      2509        +7
- Partials      1433      1433         —

Generated by Codecov Action

@alexander-alderman-webb
alexander-alderman-webb changed the base branch from master to webb/tiktoken-types September 4, 2026 14:46
@alexander-alderman-webb
alexander-alderman-webb changed the base branch from webb/tiktoken-types to webb/aiohttp-types September 4, 2026 14:53
@alexander-alderman-webb

alexander-alderman-webb commented Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

We're just type checking with litellm, #7393 (comment) is not relevant.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@alexander-alderman-webb