From b9f4c2673a8ccaac88b427d2025a77c9750a8d8c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Jun 2026 09:06:32 +0000 Subject: [PATCH] chore(deps): bump the python-dependencies group --- updated-dependencies: - dependency-name: boto3 dependency-version: 1.43.37 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: opentelemetry-api dependency-version: 1.43.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: opentelemetry-sdk dependency-version: 1.43.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: aiohttp dependency-version: 3.14.1 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: cachetools dependency-version: 7.1.4 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: click dependency-version: 8.4.2 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: cryptography dependency-version: 49.0.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: fastapi dependency-version: 0.138.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: gunicorn dependency-version: 26.0.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: litellm dependency-version: 1.90.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pydantic dependency-version: 2.13.4 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: pyjwt dependency-version: 2.13.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: starlette dependency-version: 1.3.1 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: uvicorn dependency-version: 0.49.0 dependency-type: direct:production dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] --- lib/serve/rest-api/src/requirements.txt | 32 ++++++++++++------------- 1 file changed, 16 insertions(+), 16 deletions(-) diff --git a/lib/serve/rest-api/src/requirements.txt b/lib/serve/rest-api/src/requirements.txt index 32f95850d..b8a78c627 100644 --- a/lib/serve/rest-api/src/requirements.txt +++ b/lib/serve/rest-api/src/requirements.txt @@ -1,29 +1,29 @@ # AWS SDK Dependencies # Keep boto3 aligned with LiteLLM / RDS IAM token refresh expectations. -# litellm[proxy]==1.86.2 pins boto3==1.43.1 -boto3>=1.43.1,<1.44.0 +# litellm[proxy]==1.90.1 pins boto3==1.43.1 +boto3>=1.43.37,<1.44.0 # OpenTelemetry - Optional for LiteLLM Weave integration, silences import warnings -opentelemetry-api>=1.41.0 -opentelemetry-sdk>=1.41.0 +opentelemetry-api>=1.43.0 +opentelemetry-sdk>=1.43.0 -aiohttp>=3.13.3,<4.0.0 +aiohttp>=3.14.1,<4.0.0 backoff>=2.2.1,<3.0.0 -cachetools>=7.0.2,<8.0.0 -click>=8.1.8,<9.0.0 -cryptography>=46.0.5,<47.0.0 -fastapi==0.124.4 -gunicorn>=23.0.0,<24.0.0 +cachetools>=7.1.4,<8.0.0 +click>=8.4.2,<9.0.0 +cryptography>=49.0.0,<50.0.0 +fastapi==0.138.2 +gunicorn>=26.0.0,<27.0.0 # LiteLLM — pinned by policy (orchestration / proxy compatibility). # >=1.86.2 fixes GHSA-4xpc-pv4p-pm3w (host-header auth bypass). Requires Python <3.14. -litellm[proxy]==1.86.2; python_version < "3.14" +litellm[proxy]==1.90.1; python_version < "3.14" loguru>=0.7.3,<0.8.0 -pydantic>=2.5.0,<3.0.0 -PyJWT>=2.10.1,<3.0.0 +pydantic>=2.13.4,<3.0.0 +PyJWT>=2.13.0,<3.0.0 prisma>=0.15.0,<0.16.0 -starlette>=0.40.0,<0.51.0 +starlette>=1.3.1,<1.4.0 -# ASGI Server — litellm[proxy] extra requires uvicorn>=0.32.1,<1.0.0 -uvicorn>=0.32.1,<1.0.0 +# ASGI Server — litellm[proxy] extra requires uvicorn>=0.49.0,<1.0.0 +uvicorn>=0.49.0,<1.0.0