Commit Graph
36203 Commits
Author SHA1 Message Date
Nicholas Gigliotti cb66672017 Replace hardcoded Bedrock native structured output model set with cost JSON lookup
Move the source of truth for which Bedrock models support native structured
outputs (outputConfig.textFormat) from a hardcoded substring set
(BEDROCK_NATIVE_STRUCTURED_OUTPUT_MODELS) to the cost JSON via a new
"supports_native_structured_output" flag. This makes it possible to add
support for new models (including Claude Sonnet 4.6, which was missing)
by updating the JSON alone, with no code changes needed.
2026-03-26 20:23:12 -04:00
Krrish Dholakia 8f425ec3ff fix: update ioc to include checkmarx.zone 2026-03-26 15:43:01 -07:00
ishaan-berriandGitHub 6153793f81 Merge pull request #24649 from BerriAI/ishaan-berri-patch-1
Update README.md
2026-03-26 15:22:23 -07:00
ishaan-berriandGitHub b69ce9fafa Update README.md 2026-03-26 15:22:11 -07:00
yuneng-jiangandGitHub 25feae9f0f Merge pull request #24607 from BerriAI/litellm_gha_pin_pt_2
[Infra] Pin GHA dependencies and remove unused load test files
2026-03-26 08:47:38 -07:00
yuneng-jiangandGitHub bdf4acc472 Merge pull request #24468 from BerriAI/litellm_opencode-drop-reasoningSummary-docs
docs(opencode): add guidance for dropping reasoningSummary param
2026-03-25 23:00:56 -07:00
Yuneng JiangandClaude Opus 4.6 84be6f69ef fix google-cloud-aiplatform pin to be compatible with google-genai==1.22.0
Pin to 1.115.0 (latest version that doesn't require google-genai>=1.59.0).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-25 22:37:43 -07:00
Yuneng JiangandClaude Opus 4.6 1beb687f54 pin GHA dependencies + remove unused load test files
Pin all pip install commands to exact versions and SHA-pin all GitHub
Actions to prevent supply chain attacks. Remove snok/install-poetry
in favor of direct pip install. Delete orphaned load test scripts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-25 22:32:08 -07:00
Krrish Dholakia df2a36dd27 docs: document new github + gitlab ci scripts 2026-03-25 20:17:10 -07:00
yuneng-jiangandGitHub 437341c9b5 Merge pull request #24594 from BerriAI/litellm_gha_pin_helm
[Infra] Pins GitHub Action workflows to specific hashes
2026-03-25 18:17:21 -07:00
Yuneng Jiang b90a0af0d7 remove extra @ 2026-03-25 17:46:37 -07:00
Yuneng Jiang a989587525 re-add helm unit test with checksum pin 2026-03-25 17:38:36 -07:00
Yuneng Jiang f86b240d7e pin github scripts + remove unused 2026-03-25 17:38:36 -07:00
ryan-crabbe-berriandGitHub 0d2b454cec Merge pull request #24490 from BerriAI/litellm_ryan-march-23
Litellm ryan march 23
2026-03-25 16:04:12 -07:00
ishaan-berriandGitHub 90b850ef8e Merge pull request #24587 from BerriAI/remove-phone-numbers
docs: remove phone numbers from readme and docs
2026-03-25 12:45:42 -07:00
Ishaan Jaffer a2f02aa139 docs: remove phone numbers from readme and docs 2026-03-25 12:40:40 -07:00
ishaan-berriandGitHub 67609e04bc Merge pull request #24584 from BerriAI/worktree-floofy-prancing-crystal
security: remove .claude/settings.json and block re-adding via semgrep
2026-03-25 12:28:06 -07:00
Ishaan Jaffer b77e1ccea6 security: remove .claude/settings.json and add semgrep rule to prevent re-adding 2026-03-25 11:57:43 -07:00
Krrish Dholakia 7d7045cbc1 fix: cleanup 2026-03-25 09:20:25 -07:00
Krrish Dholakia 10a48f7655 docs: add tldr 2026-03-24 19:43:13 -07:00
ishaan-berriandGitHub d93ee444fd Merge pull request #24541 from BerriAI/workflow-deletions
ci: remove publish-migrations and reset_stable workflows
2026-03-24 18:53:33 -07:00
Ishaan Jaffer 3e8a6f24b7 ci: remove all publish/deploy workflows as part of supply chain incident response 2026-03-24 18:03:04 -07:00
Ishaan Jaffer 3d5b1ecb3b ci: remove publish-migrations and reset_stable workflows 2026-03-24 17:59:07 -07:00
ishaan-berriandGitHub b26bc5a91c Merge pull request #24540 from BerriAI/worktree-tingly-jumping-lovelace
docs: minor updates to security update blog post
2026-03-24 17:35:01 -07:00
ishaan-berriandGitHub e92edee7e7 Merge branch 'main' into worktree-tingly-jumping-lovelace 2026-03-24 17:34:51 -07:00
Ishaan Jaffer f9d1f8cde6 docs: minor updates to security update blog post 2026-03-24 17:15:44 -07:00
Krrish Dholakia 4571f2a6c1 fix: add tldr to blog post 2026-03-24 16:54:59 -07:00
ishaan-berriandGitHub 7455b115bf Merge pull request #24537 from BerriAI/litellm_blog-security-incident
docs: add security update blog post for March 2026 supply chain incident
2026-03-24 16:07:45 -07:00
Ryan Crabbe eaa025ef7d docs: add security update blog post for March 2026 supply chain incident 2026-03-24 15:54:35 -07:00
Krrish Dholakia f9d29e4e4e fix(security_scans.sh): move to older trivvy version, based on https://github.com/BerriAI/litellm/issues/24518#issuecomment-4120401246 2026-03-24 11:19:15 -07:00
Krrish DholakiaandGitHub 0af114fb3a Merge pull request #24525 from BerriAI/litellm_pin_trivvy
fix(security_scans.sh): pin trivvy version
2026-03-24 09:15:34 -07:00
Krrish Dholakia fb379865ab fix(security_scans.sh): pin trivvy version 2026-03-24 09:13:37 -07:00
ryan-crabbeandGitHub 764b96b1aa Merge pull request #24486 from BerriAI/litellm_ryan-march-23-audit-log-export
docs: add audit log export to S3 documentation
2026-03-23 22:54:39 -07:00
ryan-crabbeGitHubgreptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
ffbe3896d2 Update docs/my-website/docs/proxy/multiple_admins.md
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-03-23 22:54:08 -07:00
ryan-crabbeandGitHub 4629dfe394 Merge pull request #24485 from BerriAI/litellm_migrate-route-preview-tremor-to-antd
chore: migrate route_preview.tsx from Tremor to Ant Design
2026-03-23 22:51:42 -07:00
Ryan Crabbe 57c027a2dc docs: add audit log export to S3 documentation 2026-03-23 22:46:38 -07:00
Krish DholakiaandGitHub 9343aeefca Merge pull request #24413 from benlangfeld/patch-2
Correct documentation of completion_model
2026-03-23 22:42:03 -07:00
Ryan Crabbe 7e50af9228 Migrate route_preview.tsx from Tremor to Ant Design
Replace Tremor Card/Title/Subtitle with antd Card/Typography equivalents.
2026-03-23 22:32:26 -07:00
ryan-crabbeandGitHub fb92ea21bc Merge pull request #24475 from BerriAI/litellm_fix-sso-return-to-validation
fix(proxy): ignore return_to in SSO when control_plane_url is not con…
2026-03-23 22:15:45 -07:00
Ryan Crabbe e40f68aec4 test(ui): add unit tests for 5 untested frontend components
- AntDLoadingSpinner: rendering, prop forwarding, icon styling
- MessageManager: static fallback, custom instance delegation
- claude_code_plugins/helpers: all pure utility functions (15 describe blocks, 55 tests)
- AgentSelector: fetch behavior, loading states, error handling, disabled state
- WorkerDropdown: conditional rendering, worker options, selection changes
2026-03-23 22:03:10 -07:00
Ryan Crabbe 0aadf51342 fix(proxy): ignore return_to in SSO when control_plane_url is not configured
Instead of returning a 400 error when return_to is passed without
control_plane_url configured, silently ignore it and proceed with
the normal same-origin SSO flow.
2026-03-23 21:54:29 -07:00
Sameer Kankute 80af635eb1 Fix docs 2026-03-24 09:44:04 +05:30
Sameer KankuteandClaude Sonnet 4.6 4e6e566b4d docs(opencode): fix model prefix and clarify drop_params scope
- Use openai/gpt-5 prefix to match existing doc conventions
- Clarify that additional_drop_params must be added to every affected
  model entry, not just one

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 09:42:59 +05:30
Sameer KankuteandClaude Sonnet 4.6 17e6e7a4cc docs(opencode): add guidance for dropping reasoningSummary param
OpenCode sends a `reasoningSummary` Responses API param with chat
completion requests. Document how to use `additional_drop_params` to
drop it and avoid 400 errors from the OpenAI API.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 09:33:28 +05:30
Krish DholakiaandGitHub 3292d02aa4 Merge pull request #24460 from DmitriyAlergant/ci/skip-scheduled-workflows-on-forks
ci: skip scheduled workflows on forks
2026-03-23 19:54:50 -07:00
Krish DholakiaandGitHub 14fffc2770 Merge pull request #24432 from BerriAI/krrishdholakia/project-id-tracking
feat(proxy): add project_alias tracking in callbacks
v1.82.6.dev2
2026-03-23 19:24:44 -07:00
DmitriyAlergant 1310a275d2 ci: narrow codeql guard to schedule-only
Use event_name check so push/PR-triggered CodeQL scans still run on
forks — only the scheduled run is skipped.
2026-03-23 21:39:11 -04:00
DmitriyAlergant 91bc095e18 ci: skip scheduled workflows on forks
Add `if: github.repository == 'BerriAI/litellm'` guard to scheduled
jobs in stale.yml, codeql.yml, and create_daily_staging_branch.yml.

This matches the existing pattern in auto_update_price_and_context_window.yml
and prevents these workflows from running unnecessarily on fork repositories.
2026-03-23 21:29:00 -04:00
Krrish DholakiaandClaude Opus 4.6 26d162ccf4 fix(test): add user_api_key_project_alias to spend logs expected keys
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-23 18:12:50 -07:00
Krrish Dholakia 742e176611 docs(reasoning_content.md): update guide 2026-03-23 17:23:14 -07:00