Skip to content

ci(python): update litellm requirement from <=1.83.13,>=1.75.9 to >=1.75.9,<=1.89.1 in /strands-py#2819

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/strands-py/litellm-gte-1.75.9-and-lte-1.89.1
Open

ci(python): update litellm requirement from <=1.83.13,>=1.75.9 to >=1.75.9,<=1.89.1 in /strands-py#2819
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/strands-py/litellm-gte-1.75.9-and-lte-1.89.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on litellm to permit the latest version.

Release notes

Sourced from litellm's releases.

v1.89.1

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.89.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

Full Changelog: BerriAI/litellm@v1.89.0...v1.89.1

Commits
  • 3983231 Merge pull request #30502 from BerriAI/litellm_backport_1_89_x_bp_1_89x_multi
  • 24e30b5 fix(types): coerce dict server_tool_use to ServerToolUse in Usage init
  • 9bd1022 bump: version 1.89.0 -> 1.89.1
  • 9dcd406 chore(deps): bump vitest, brace-expansion, pypdf and tornado (#30220)
  • 7771ec9 fix(mcp): drop phantom 401 span on delegated OAuth2 tool calls (#30494)
  • bcfed3e fix(proxy): return deprecated-key lookup result directly in get_data combined...
  • bf6f134 fix(passthrough): skip [DONE] sentinels and non-JSON SSE frames in Anthropic ...
  • 929f047 fix(proxy): populate access_via_team_ids on /v1/model/info (#30274)
  • ddc4da5 fix(passthrough): resolve costing model when body model is unknown (#30160)
  • 7a72b10 Merge pull request #29528 from aanchal22/litellm_byok-alias-merge
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 16, 2026
@github-actions github-actions Bot added size/xs area-community Related to community and contributor health chore Maintenance tasks, dependency updates, CI changes, refactoring with no user-facing impact labels Jun 16, 2026
Updates the requirements on [litellm](https://github.com/BerriAI/litellm) to permit the latest version.
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](BerriAI/litellm@litellm_1.81.13-dev...v1.89.1)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.89.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/strands-py/litellm-gte-1.75.9-and-lte-1.89.1 branch from dd28967 to e3adf1d Compare June 16, 2026 15:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-community Related to community and contributor health chore Maintenance tasks, dependency updates, CI changes, refactoring with no user-facing impact dependencies Pull requests that update a dependency file python Pull requests that update python code size/xs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants