Sameer Kankute
00a810e92d
feat(openai): round-trip Responses API reasoning_items in chat completions
...
Made-with: Cursor
2026-03-27 20:25:08 +05:30
yuneng-jiang
b20cff8673
Merge pull request #24654 from BerriAI/litellm_publish_to_pypi_migrate
...
[Infra] Migrate PyPI Publishing from CircleCI to GitHub Actions OIDC
2026-03-26 19:09:00 -07:00
Yuneng Jiang
ba8455a3be
[Infra] Migrate PyPI publishing from CircleCI to GitHub Actions OIDC
...
- Add .github/workflows/publish_to_pypi.yml with OIDC trusted publisher
- Remove publish_to_pypi job from .circleci/config.yml
- Zero long-lived tokens, all actions SHA-pinned, build deps version-pinned
2026-03-26 19:02:14 -07:00
Krrish Dholakia
8f425ec3ff
fix: update ioc to include checkmarx.zone
2026-03-26 15:43:01 -07:00
ishaan-berri
6153793f81
Merge pull request #24649 from BerriAI/ishaan-berri-patch-1
...
Update README.md
2026-03-26 15:22:23 -07:00
ishaan-berri
b69ce9fafa
Update README.md
2026-03-26 15:22:11 -07:00
yuneng-jiang
25feae9f0f
Merge pull request #24607 from BerriAI/litellm_gha_pin_pt_2
...
[Infra] Pin GHA dependencies and remove unused load test files
2026-03-26 08:47:38 -07:00
yuneng-jiang
bdf4acc472
Merge pull request #24468 from BerriAI/litellm_opencode-drop-reasoningSummary-docs
...
docs(opencode): add guidance for dropping reasoningSummary param
2026-03-25 23:00:56 -07:00
Yuneng Jiang
84be6f69ef
fix google-cloud-aiplatform pin to be compatible with google-genai==1.22.0
...
Pin to 1.115.0 (latest version that doesn't require google-genai>=1.59.0).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 22:37:43 -07:00
Yuneng Jiang
1beb687f54
pin GHA dependencies + remove unused load test files
...
Pin all pip install commands to exact versions and SHA-pin all GitHub
Actions to prevent supply chain attacks. Remove snok/install-poetry
in favor of direct pip install. Delete orphaned load test scripts.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-25 22:32:08 -07:00
Krrish Dholakia
df2a36dd27
docs: document new github + gitlab ci scripts
2026-03-25 20:17:10 -07:00
yuneng-jiang
437341c9b5
Merge pull request #24594 from BerriAI/litellm_gha_pin_helm
...
[Infra] Pins GitHub Action workflows to specific hashes
2026-03-25 18:17:21 -07:00
Yuneng Jiang
b90a0af0d7
remove extra @
2026-03-25 17:46:37 -07:00
Yuneng Jiang
a989587525
re-add helm unit test with checksum pin
2026-03-25 17:38:36 -07:00
Yuneng Jiang
f86b240d7e
pin github scripts + remove unused
2026-03-25 17:38:36 -07:00
ryan-crabbe-berri
0d2b454cec
Merge pull request #24490 from BerriAI/litellm_ryan-march-23
...
Litellm ryan march 23
2026-03-25 16:04:12 -07:00
ishaan-berri
90b850ef8e
Merge pull request #24587 from BerriAI/remove-phone-numbers
...
docs: remove phone numbers from readme and docs
2026-03-25 12:45:42 -07:00
Ishaan Jaffer
a2f02aa139
docs: remove phone numbers from readme and docs
2026-03-25 12:40:40 -07:00
ishaan-berri
67609e04bc
Merge pull request #24584 from BerriAI/worktree-floofy-prancing-crystal
...
security: remove .claude/settings.json and block re-adding via semgrep
2026-03-25 12:28:06 -07:00
Ishaan Jaffer
b77e1ccea6
security: remove .claude/settings.json and add semgrep rule to prevent re-adding
2026-03-25 11:57:43 -07:00
Krrish Dholakia
7d7045cbc1
fix: cleanup
2026-03-25 09:20:25 -07:00
Krrish Dholakia
10a48f7655
docs: add tldr
2026-03-24 19:43:13 -07:00
ishaan-berri
d93ee444fd
Merge pull request #24541 from BerriAI/workflow-deletions
...
ci: remove publish-migrations and reset_stable workflows
2026-03-24 18:53:33 -07:00
Ishaan Jaffer
3e8a6f24b7
ci: remove all publish/deploy workflows as part of supply chain incident response
2026-03-24 18:03:04 -07:00
Ishaan Jaffer
3d5b1ecb3b
ci: remove publish-migrations and reset_stable workflows
2026-03-24 17:59:07 -07:00
ishaan-berri
b26bc5a91c
Merge pull request #24540 from BerriAI/worktree-tingly-jumping-lovelace
...
docs: minor updates to security update blog post
2026-03-24 17:35:01 -07:00
ishaan-berri
e92edee7e7
Merge branch 'main' into worktree-tingly-jumping-lovelace
2026-03-24 17:34:51 -07:00
Ishaan Jaffer
f9d1f8cde6
docs: minor updates to security update blog post
2026-03-24 17:15:44 -07:00
Krrish Dholakia
4571f2a6c1
fix: add tldr to blog post
2026-03-24 16:54:59 -07:00
ishaan-berri
7455b115bf
Merge pull request #24537 from BerriAI/litellm_blog-security-incident
...
docs: add security update blog post for March 2026 supply chain incident
2026-03-24 16:07:45 -07:00
Ryan Crabbe
eaa025ef7d
docs: add security update blog post for March 2026 supply chain incident
2026-03-24 15:54:35 -07:00
Krrish Dholakia
f9d29e4e4e
fix(security_scans.sh): move to older trivvy version, based on https://github.com/BerriAI/litellm/issues/24518#issuecomment-4120401246
2026-03-24 11:19:15 -07:00
Krrish Dholakia
0af114fb3a
Merge pull request #24525 from BerriAI/litellm_pin_trivvy
...
fix(security_scans.sh): pin trivvy version
2026-03-24 09:15:34 -07:00
Krrish Dholakia
fb379865ab
fix(security_scans.sh): pin trivvy version
2026-03-24 09:13:37 -07:00
ryan-crabbe
764b96b1aa
Merge pull request #24486 from BerriAI/litellm_ryan-march-23-audit-log-export
...
docs: add audit log export to S3 documentation
2026-03-23 22:54:39 -07:00
ryan-crabbe
ffbe3896d2
Update docs/my-website/docs/proxy/multiple_admins.md
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-03-23 22:54:08 -07:00
ryan-crabbe
4629dfe394
Merge pull request #24485 from BerriAI/litellm_migrate-route-preview-tremor-to-antd
...
chore: migrate route_preview.tsx from Tremor to Ant Design
2026-03-23 22:51:42 -07:00
Ryan Crabbe
57c027a2dc
docs: add audit log export to S3 documentation
2026-03-23 22:46:38 -07:00
Krish Dholakia
9343aeefca
Merge pull request #24413 from benlangfeld/patch-2
...
Correct documentation of completion_model
2026-03-23 22:42:03 -07:00
Ryan Crabbe
7e50af9228
Migrate route_preview.tsx from Tremor to Ant Design
...
Replace Tremor Card/Title/Subtitle with antd Card/Typography equivalents.
2026-03-23 22:32:26 -07:00
ryan-crabbe
fb92ea21bc
Merge pull request #24475 from BerriAI/litellm_fix-sso-return-to-validation
...
fix(proxy): ignore return_to in SSO when control_plane_url is not con…
2026-03-23 22:15:45 -07:00
Ryan Crabbe
e40f68aec4
test(ui): add unit tests for 5 untested frontend components
...
- AntDLoadingSpinner: rendering, prop forwarding, icon styling
- MessageManager: static fallback, custom instance delegation
- claude_code_plugins/helpers: all pure utility functions (15 describe blocks, 55 tests)
- AgentSelector: fetch behavior, loading states, error handling, disabled state
- WorkerDropdown: conditional rendering, worker options, selection changes
2026-03-23 22:03:10 -07:00
Ryan Crabbe
0aadf51342
fix(proxy): ignore return_to in SSO when control_plane_url is not configured
...
Instead of returning a 400 error when return_to is passed without
control_plane_url configured, silently ignore it and proceed with
the normal same-origin SSO flow.
2026-03-23 21:54:29 -07:00
Sameer Kankute
80af635eb1
Fix docs
2026-03-24 09:44:04 +05:30
Sameer Kankute
4e6e566b4d
docs(opencode): fix model prefix and clarify drop_params scope
...
- Use openai/gpt-5 prefix to match existing doc conventions
- Clarify that additional_drop_params must be added to every affected
model entry, not just one
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com >
2026-03-24 09:42:59 +05:30
Sameer Kankute
17e6e7a4cc
docs(opencode): add guidance for dropping reasoningSummary param
...
OpenCode sends a `reasoningSummary` Responses API param with chat
completion requests. Document how to use `additional_drop_params` to
drop it and avoid 400 errors from the OpenAI API.
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com >
2026-03-24 09:33:28 +05:30
Krish Dholakia
3292d02aa4
Merge pull request #24460 from DmitriyAlergant/ci/skip-scheduled-workflows-on-forks
...
ci: skip scheduled workflows on forks
2026-03-23 19:54:50 -07:00
Krish Dholakia
14fffc2770
Merge pull request #24432 from BerriAI/krrishdholakia/project-id-tracking
...
feat(proxy): add project_alias tracking in callbacks
v1.82.6.dev2
2026-03-23 19:24:44 -07:00
DmitriyAlergant
1310a275d2
ci: narrow codeql guard to schedule-only
...
Use event_name check so push/PR-triggered CodeQL scans still run on
forks — only the scheduled run is skipped.
2026-03-23 21:39:11 -04:00
DmitriyAlergant
91bc095e18
ci: skip scheduled workflows on forks
...
Add `if: github.repository == 'BerriAI/litellm'` guard to scheduled
jobs in stale.yml, codeql.yml, and create_daily_staging_branch.yml.
This matches the existing pattern in auto_update_price_and_context_window.yml
and prevents these workflows from running unnecessarily on fork repositories.
2026-03-23 21:29:00 -04:00