mirror of
https://github.com/tiennm99/litellm.git
synced 2026-07-14 07:05:10 +00:00
ishaan-berri
4bcd4bef44
* bump litellm-enterprise to 0.1.37 * update poetry.lock for enterprise 0.1.37 bump
89 lines
3.9 KiB
Plaintext
89 lines
3.9 KiB
Plaintext
# LITELLM PROXY DEPENDENCIES #
|
|
# Security: explicit pins for transitive deps (CVE fixes)
|
|
urllib3==2.6.3 # CVE-2025-66471, CVE-2025-66418, CVE-2026-21441
|
|
tornado==6.5.5 # CVE-2025-67725, CVE-2025-67726, CVE-2025-67724, CVE-2026-31958, GHSA-78cv-mqj4-43f7
|
|
filelock==3.25.2 # CVE-2025-68146
|
|
h11==0.16.0 # CVE-2025-43859, GHSA-vqfr-h8mv-ghfj — HTTP request smuggling
|
|
wheel==0.46.3 # CVE-2026-24049 — path traversal
|
|
Pillow==12.1.1 #GHSA-cfh3-3jmp-rvhc
|
|
cryptography==46.0.5 #GHSA-r6ph-v2qm-q3c2
|
|
|
|
anyio==4.8.0 # openai + http req.
|
|
httpx==0.28.1
|
|
openai==2.30.0 # openai req.
|
|
fastapi==0.124.4 # server dep
|
|
starlette==0.49.1 # starlette fastapi dep
|
|
backoff==2.2.1 # server dep
|
|
pyyaml==6.0.3 # server dep
|
|
uvicorn==0.33.0 # server dep
|
|
gunicorn==23.0.0 # server dep
|
|
fastuuid==0.14.0 # for uuid4
|
|
uvloop==0.21.0 # uvicorn dep, gives us much better performance under load
|
|
boto3==1.42.80 # aws bedrock/sagemaker calls
|
|
redis==5.2.1 # redis caching
|
|
redisvl==0.4.1 ## redis semantic caching
|
|
prisma==0.11.0 # for db
|
|
nodejs-wheel-binaries==24.13.1 ## required by prisma for migrations, prevents runtime download (updated from nodejs-bin for security fixes)
|
|
mangum==0.17.0 # for aws lambda functions
|
|
pynacl==1.6.2 # for encrypting keys
|
|
google-cloud-aiplatform==1.133.0 # for vertex ai calls
|
|
google-cloud-iam==2.19.1 # for GCP IAM Redis authentication
|
|
google-genai==1.37.0
|
|
anthropic[vertex]==0.54.0
|
|
mcp==1.26.0 ; python_version >= "3.10" # for MCP server
|
|
# google-generativeai removed - deprecated, replaced by google-genai (line 21)
|
|
async_generator==1.10.0 # for async ollama calls
|
|
langfuse==2.59.7 # for langfuse self-hosted logging
|
|
prometheus_client==0.20.0 # for /metrics endpoint on proxy
|
|
ddtrace==2.19.0 # for advanced DD tracing / profiling
|
|
orjson==3.10.15 # fast /embedding responses
|
|
polars==1.39.3 # for data processing
|
|
apscheduler==3.11.2 # for resetting budget in background
|
|
fastapi-sso==0.16.0 # admin UI, SSO
|
|
pyjwt[crypto]==2.12.1 ; python_version >= "3.9"
|
|
python-multipart==0.0.20 # admin UI
|
|
jaraco.context==6.1.2
|
|
azure-ai-contentsafety==1.0.0 # for azure content safety
|
|
azure-identity==1.25.3 ; python_version >= "3.9" # for azure content safety
|
|
azure-keyvault==4.2.0 # for azure KMS integration
|
|
azure-storage-file-datalake==12.20.0 # for azure buck storage logging
|
|
opentelemetry-api==1.28.0
|
|
opentelemetry-sdk==1.28.0
|
|
opentelemetry-exporter-otlp==1.28.0
|
|
a2a-sdk==0.3.25 ; python_version >= "3.10"
|
|
# grpcio: pinned to 1.80.0 (past reconnect bug #38290 in 1.68.x, has Python 3.14 wheels)
|
|
grpcio==1.80.0
|
|
sentry_sdk==2.21.0 # for sentry error handling
|
|
detect-secrets==1.5.0 # Enterprise - secret detection / masking in LLM requests
|
|
tzdata==2025.1 # IANA time zone database
|
|
litellm-proxy-extras==0.4.65 # for proxy extras - e.g. prisma migrations
|
|
llm-sandbox==0.3.31 # for skill execution in sandbox
|
|
### LITELLM PACKAGE DEPENDENCIES
|
|
python-dotenv==1.0.1 # for env
|
|
tiktoken==0.12.0 # for calculating usage
|
|
importlib-metadata==8.5.0 # for random utils
|
|
tokenizers==0.22.2 # for calculating usage
|
|
click==8.1.8 # for proxy cli
|
|
rich==13.9.4 # for litellm proxy cli
|
|
jinja2==3.1.6 # for prompt templates
|
|
aiohttp==3.13.5 # for network calls
|
|
tenacity==8.5.0 # for retrying requests, when litellm.num_retries set
|
|
pydantic==2.12.5 # proxy + openai req. + mcp
|
|
jsonschema==4.23.0 # validating json schema - aligned with openapi-core + mcp
|
|
websockets==15.0.1 # for realtime API
|
|
soundfile==0.12.1 # for audio file processing
|
|
openapi-core==0.21.0 # for OpenAPI compliance tests
|
|
pypdf==6.9.2 # for PDF text extraction in RAG ingestion (CVE-2026-27888)
|
|
|
|
# Transitive deps pinned to prevent floating between builds
|
|
aiofiles==24.1.0 # transitive dep (langfuse)
|
|
colorlog==6.10.1 # transitive dep (ddtrace)
|
|
grpc-google-iam-v1==0.14.3 # transitive dep (google-cloud-iam)
|
|
hf-xet==1.4.2 # transitive dep (huggingface_hub)
|
|
requests-toolbelt==1.0.0 # transitive dep (langfuse)
|
|
|
|
########################
|
|
# LITELLM ENTERPRISE DEPENDENCIES
|
|
########################
|
|
litellm-enterprise==0.1.37
|