From a36d2de5c9536fb5264d66d8d1711077d740417d Mon Sep 17 00:00:00 2001 From: ryan-crabbe-berri Date: Wed, 16 Sep 2026 17:07:48 -0700 Subject: [PATCH] fix(proxy): read the allowed request off the verdict and type the empty metadata set CodeQL flagged the match capture as possibly uninitialized --- .../management_endpoints/team_admin_field_permissions.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/litellm/proxy/management_endpoints/team_admin_field_permissions.py b/litellm/proxy/management_endpoints/team_admin_field_permissions.py index 4248501551f..77e3768b702 100644 --- a/litellm/proxy/management_endpoints/team_admin_field_permissions.py +++ b/litellm/proxy/management_endpoints/team_admin_field_permissions.py @@ -148,7 +148,7 @@ def _only_changes(data: UpdateTeamRequest, changed: frozenset[str]) -> UpdateTea """The request without the values it resends unchanged, which would otherwise still trigger derived writes such as a resent budget_duration pushing budget_reset_at back.""" sent: Final = frozenset(data.model_fields_set) - via_metadata: Final = frozenset({"metadata"}) if changed - sent else frozenset() + via_metadata: Final = frozenset({"metadata"}) if changed - sent else frozenset[str]() kept: Final = frozenset({"team_id"}) | (changed & sent) | via_metadata return UpdateTeamRequest.model_validate(data.model_dump(include=MappingProxyType({field: True for field in kept}))) @@ -169,8 +169,8 @@ def team_admin_edit_verdict( def team_admin_request_or_raise(verdict: TeamAdminEditVerdict) -> UpdateTeamRequest: match verdict: - case TeamAdminEditAllowed(request=request): - return request + case TeamAdminEditAllowed(): + return verdict.request case TeamAdminEditingDisabled(): raise HTTPException( status_code=403,