Skip to content

chore(deps): update dependency litellm to v1.84.0 - #2

Open
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/litellm-1.x-lockfile
Open

chore(deps): update dependency litellm to v1.84.0#2
dev-mend-for-github-com[bot] wants to merge 1 commit into
masterfrom
whitesource-remediate/litellm-1.x-lockfile

Conversation

@dev-mend-for-github-com

@dev-mend-for-github-comdev-mend-for-github-comBot commented Jun 30, 2025

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

PackageTypeUpdateChange
litellmdependenciesminor1.17.91.84.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS ScoreVulnerabilityReachability
Critical Critical9.8CVE-2024-4264
Critical Critical9.8CVE-2024-5751
High High8.2CVE-2026-59822
High High8.1CVE-2025-0628
High High8.1CVE-2026-59820
High High7.5CVE-2024-10188
High High7.5CVE-2024-8984
High High7.5CVE-2024-9606
High High7.5CVE-2025-0330
Medium Medium6.5CVE-2024-4888
Medium Medium6.4CVE-2024-5225
Medium Medium5.3CVE-2024-5710
Medium Medium4.9CVE-2024-4890
Medium Medium4.7CVE-2026-59821
Low Low2.7CVE-2026-59819

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS ScoreVulnerabilityReachability
Critical Critical9.8CVE-2024-4264
Critical Critical9.8CVE-2024-5751
High High8.2CVE-2026-59822
High High8.1CVE-2025-0628
High High8.1CVE-2026-59820
High High7.5CVE-2024-10188
High High7.5CVE-2024-8984
High High7.5CVE-2024-9606
High High7.5CVE-2025-0330
Medium Medium6.5CVE-2024-4888
Medium Medium6.4CVE-2024-5225
Medium Medium5.3CVE-2024-5710
Medium Medium4.9CVE-2024-4890
Medium Medium4.7CVE-2026-59821
Low Low2.7CVE-2026-59819

Release Notes

BerriAI/litellm (litellm)

v1.84.0

⚠️Heads up — this release contains breaking changes.
Read the full release notes here: v1.84.0 release notes


Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
ghcr.io/berriai/litellm:v1.84.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/v1.84.0/cosign.pub \
ghcr.io/berriai/litellm:v1.84.0

Expected output:

The following checks were performed on each of these signatures:
- The cosign claims were validated
- The signatures were verified against the specified public key

What's Changed

New Contributors

Full Changelog: BerriAI/litellm@v1.83.14-stable.patch.3...v1.84.0

v1.82.1

What's Changed

Note

PR body was truncated to here.

@dev-mend-for-github-comdev-mend-for-github-comBot added the security fix Security fix generated by Mend label Jun 30, 2025
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 11 times, most recently from 14fb826 to 1633d6aCompareJuly 10, 2025 19:06
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 7 times, most recently from f9b7c63 to 1229c8bCompareJuly 17, 2025 03:49
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 4 times, most recently from b32f484 to 0cdb841CompareJuly 23, 2025 23:56
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 4 times, most recently from cc9d6a5 to aff3e4eCompareJuly 30, 2025 13:16
@dev-mend-for-github-comdev-mend-for-github-comBot changed the title chore(deps): update dependency litellm to v1.61.15chore(deps): update dependency litellm to v1.53.1Jul 30, 2025
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 2 times, most recently from 31e119f to 6a5f4b1CompareAugust 2, 2025 06:15
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 7 times, most recently from 4e32b7e to 361393eCompareAugust 15, 2025 06:44
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 6 times, most recently from 4572a60 to 876392bCompareAugust 21, 2025 22:52
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 3 times, most recently from d9adeea to 389b3a6CompareAugust 26, 2025 22:02
@dev-mend-for-github-comdev-mend-for-github-comBot changed the title chore(deps): update dependency litellm to v1.53.1chore(deps): update dependency litellm to v1.61.15Aug 29, 2025
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 8 times, most recently from ae7bd32 to 80eab84CompareSeptember 4, 2025 18:28
@dev-mend-for-github-com
dev-mend-for-github-comBotforce-pushed the whitesource-remediate/litellm-1.x-lockfile branch 4 times, most recently from a1760aa to 3ac8f3aCompareSeptember 10, 2025 15:26
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fixSecurity fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants