From 32a5feb450926fb8d54e87b6697bb48da2f6555f Mon Sep 17 00:00:00 2001 From: yuneng-jiang Date: Fri, 23 Oct 2026 18:25:05 -0700 Subject: [PATCH] fix(docker): update bundled LiteAdmin CA roots and aiohttp (#48139) Move the liteadmin-builder pin from litellm-admin-agent ef501e9 to 5661c80, which ships certifi 2026.10.19 and aiohttp 3.14.5 in the /opt/liteadmin venv. That certifi drops emSign ECC Root CA - G3, whose intermediates were revoked; the earlier bundled-CA updates did not reach this venv because it installs from the agent's own lock file. The only other change in ef501e9..5661c80 is the AgentChat bump from litellm-admin-agent#24 (Slack follow-up routing with models that reject structured output). (cherry picked from commit 755fdc570d40130b8c9991d62ac6b5b1d8800589) --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 0ac002f5a9f..b3988aa40a9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -120,8 +120,8 @@ RUN sed -i 's/\r$//' docker/entrypoint.sh && chmod +x docker/entrypoint.sh && \ FROM $LITELLM_BUILD_IMAGE AS liteadmin-builder COPY --from=uvbin /uv /usr/local/bin/uv RUN apk add --no-cache python-3.13 -ADD --checksum=sha256:2f7ae5cdd9d91731c0990e74a58239dc3e3fd2bf28dab23b55eafcdc47aaf87e \ - https://github.com/BerriAI/litellm-admin-agent/archive/ef501e94bc9fbacb9233b922abf71427f030408c.tar.gz /tmp/liteadmin.tar.gz +ADD --checksum=sha256:4fb1847e28e2be30ba76dac94f02c4903291326516a0f4ba772f6ffb8b25d05c \ + https://github.com/BerriAI/litellm-admin-agent/archive/5661c805ce479a0cf11b842ea133cf8d22cd7e34.tar.gz /tmp/liteadmin.tar.gz RUN mkdir /tmp/liteadmin && tar xzf /tmp/liteadmin.tar.gz --strip-components=1 -C /tmp/liteadmin && \ uv venv /opt/liteadmin --python python3.13 && \ uv pip install --python /opt/liteadmin/bin/python --require-hashes -r /tmp/liteadmin/requirements.txt && \