Tools
LiteLLM 1.99.0 signs every Docker image with cosign and documents pinned-commit verification
Released 2026-09-01, LiteLLM v1.99.0 leads its release notes with cosign signature verification for ghcr.io/berriai/litellm images, recommending verification against the public key at pinned commit 0112e53 because a commit hash is cryptographically immutable, with tag-based verification offered as the weaker convenience option. The release also adds an async Rust OCR bridge with MCP OAuth UI restore (#31453), WebSocket passthrough registration for OpenAI prefixes (#36151), Bedrock batch cancellation via StopModelInvocationJob (#34087), and a typing cleanup dropping 1,300 basedpyright errors across 30 files.
Source
↳ Follow the thread