scriptoriumadmin/litellm
1
0
Fork 0
mirror of https://github.com/BerriAI/litellm.git synced 2026-08-28 05:25:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9
33248 commits 3745 branches 1395 tags 3.9 GiB
Commit graph

47 commits

Author SHA1 Message Date
Ishaan Jaff
2acc5cc457
fix(security): fix CVE-2025-69873, CVE-2026-26996 in docs deps; allowlist nodejs_wheel CVEs in Grype scan (#21787) 
* fix(security): fix CVE-2025-69873 and CVE-2026-26996 in docs dependencies

Use npm overrides to pin patched versions:
- ajv@6.12.6 → 6.14.0 (fixes ReDoS CVE-2025-69873)
- ajv@8.17.1 → 8.18.0 (fixes ReDoS CVE-2025-69873)
- minimatch@3.1.2 → 10.2.1 (fixes DoS CVE-2026-26996)

serve-handler only calls minimatch(path, pattern) so the 3.x→10.x
upgrade is safe.

* fix(ruff): add missing Set and Dict imports to fix F821 errors

* fix(security): scope ajv overrides to avoid top-level version conflict

Replacing global 'ajv: 8.18.0' override with scoped 'schema-utils@4'
override. The global override conflicted with the nested file-loader/
null-loader/url-loader overrides, causing npm to install ajv@6 at the
top level where ajv-keywords@5.x requires ajv@8 (ajv/dist/compile/codegen).

Now:
- schema-utils@3 + loaders → ajv@6.14.0 (safe minor bump)
- schema-utils@4 → ajv@8.18.0 (safe minor bump)
- top-level ajv unmodified (stays at 8.x for ajv-keywords@5)

* fix(security): allowlist minimatch and tar CVEs from nodejs_wheel, bump tar override to >=7.5.8
 2026-02-21 11:18:52 -08:00
Ishaan Jaff
8a145da793
fix(security): fix CVE-2025-69873 and CVE-2026-26996 in docs dependencies (#21782) 
* fix(security): fix CVE-2025-69873 and CVE-2026-26996 in docs dependencies

Use npm overrides to pin patched versions:
- ajv@6.12.6 → 6.14.0 (fixes ReDoS CVE-2025-69873)
- ajv@8.17.1 → 8.18.0 (fixes ReDoS CVE-2025-69873)
- minimatch@3.1.2 → 10.2.1 (fixes DoS CVE-2026-26996)

serve-handler only calls minimatch(path, pattern) so the 3.x→10.x
upgrade is safe.

* fix(ruff): add missing Set and Dict imports to fix F821 errors

* fix(security): scope ajv overrides to avoid top-level version conflict

Replacing global 'ajv: 8.18.0' override with scoped 'schema-utils@4'
override. The global override conflicted with the nested file-loader/
null-loader/url-loader overrides, causing npm to install ajv@6 at the
top level where ajv-keywords@5.x requires ajv@8 (ajv/dist/compile/codegen).

Now:
- schema-utils@3 + loaders → ajv@6.14.0 (safe minor bump)
- schema-utils@4 → ajv@8.18.0 (safe minor bump)
- top-level ajv unmodified (stays at 8.x for ajv-keywords@5)
 2026-02-21 10:56:11 -08:00
Harshit Jain
3b043ee8bf
fix critical CVE vulnerabliltes (#20683) 2026-02-07 22:23:01 -08:00
yuneng-jiang
ce586ec3d1 Overriding lodash-es with version 4.17.23 in docs 2026-01-22 12:13:40 -08:00
Alexsander Hamir
8172f6cdd6
Fix security vulnerability: update mdast-util-to-hast to 13.2.1 (CVE-2025-66400) (#17601) 2025-12-06 09:26:26 -08:00
Ishaan Jaffer
b487e67dec sec fix 2025-11-26 18:23:18 -08:00
Ishaan Jaffer
ff99f93dfc fix req.txt 2025-11-22 11:46:17 -08:00
Ishaan Jaff
25cb873467
[UI] expose backend endpoint for callbacks settings (#16698) 
* init json for

* add SQS fields

* fix params

* return callbacks configs

* test_get_callback_configs

* test_get_callback_configs

* vercel build fix
 2025-11-15 16:44:17 -08:00
Ishaan Jaffer
c7807f4841 fix pkg 2025-11-15 16:26:56 -08:00
Ishaan Jaffer
03ceb75d4e sec fix 2025-11-15 15:36:05 -08:00
Ishaan Jaff
e325b1833d
Docs - v1.80.0 (#16694) 
* fix pkg on docs

* refactor 1

* fix refactor

* docs

* fix

* fixes
 2025-11-15 14:42:43 -08:00
Ishaan Jaffer
a1286fb609 security fix 2025-11-14 18:43:41 -08:00
Ishaan Jaffer
936bed056b security fix 2025-11-14 17:43:00 -08:00
Ishaan Jaff
e229a6a796 security fix 2025-08-20 08:35:59 -07:00
Ishaan Jaff
7e2a00c848
[Docs] Add docs on how router / cooldowns work (#13444) 
* add theme-mermaid

* docs cool down

* docs cooldown
 2025-08-08 15:13:37 -07:00
Ishaan Jaff
bf300f8ca7 Revert "Litellm dev 07 21 2025 p1 (#12848)" 
This reverts commit e4e10aa4ed.
 2025-07-22 18:28:36 -07:00
Krish Dholakia
e4e10aa4ed
Litellm dev 07 21 2025 p1 (#12848) 
* fix(main.py): fix async retryer

Fixes https://github.com/BerriAI/litellm/issues/12830

* fix(forward_clientside_headers_by_model_group.py): filter out 'content-type' from forwardable headers

clientside content-type != proxy content type, can cause requests to hang

* test(tests/): update tests
 2025-07-21 22:09:39 -07:00
Ishaan Jaff
83463e3ea5 fix docusaurus package lock 2025-07-21 18:29:17 -07:00
tanjiro
bd0a5f7387
Inkeep searchbar and chat added to the Docs (#12030) 
* inkeep chat added

* add prod key
 2025-06-26 10:13:42 -07:00
Ishaan Jaff
7f11b5b76c
[Security] - Add Trivy Security Scan for UI + Docs folder - remove all vulnerabilities (#11778) 
* docs - sec scan

* ui - fix 0 security issues

* fix - 0 medium vuln on docs

* add MEDIUM scan for Docs

* Run Trivy scan on LiteLLM UI
 2025-06-16 17:13:19 -07:00
Ishaan Jaff
261d56b214
[Security] Fixes for docs (#11776) 
* fix - docs

* docs fixes

* fixes for docs

* fixes docs
 2025-06-16 16:20:55 -07:00
Ishaan Jaff
25c726ed61
Revert "build(deps): bump axios, @docusaurus/core, @docusaurus/plugin-google-…" (#10421) 
This reverts commit a01cd87f4d.
 2025-04-29 17:33:47 -07:00
dependabot[bot]
a01cd87f4d
build(deps): bump axios, @docusaurus/core, @docusaurus/plugin-google-gtag, @docusaurus/plugin-ideal-image and @docusaurus/preset-classic (#10419) 
Removes [axios](https://github.com/axios/axios). It's no longer used after updating ancestor dependencies [axios](https://github.com/axios/axios), [@docusaurus/core](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus), [@docusaurus/plugin-google-gtag](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-google-gtag), [@docusaurus/plugin-ideal-image](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-plugin-ideal-image) and [@docusaurus/preset-classic](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-preset-classic). These dependencies need to be updated together.


Removes `axios`

Updates `@docusaurus/core` from 2.4.1 to 3.7.0
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.7.0/packages/docusaurus)

Updates `@docusaurus/plugin-google-gtag` from 2.4.3 to 3.7.0
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.7.0/packages/docusaurus-plugin-google-gtag)

Updates `@docusaurus/plugin-ideal-image` from 2.4.3 to 3.7.0
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.7.0/packages/docusaurus-plugin-ideal-image)

Updates `@docusaurus/preset-classic` from 2.4.1 to 3.7.0
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.7.0/packages/docusaurus-preset-classic)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@docusaurus/core"
  dependency-version: 3.7.0
  dependency-type: direct:production
- dependency-name: "@docusaurus/plugin-google-gtag"
  dependency-version: 3.7.0
  dependency-type: direct:production
- dependency-name: "@docusaurus/plugin-ideal-image"
  dependency-version: 3.7.0
  dependency-type: direct:production
- dependency-name: "@docusaurus/preset-classic"
  dependency-version: 3.7.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-29 17:23:07 -07:00
Krrish Dholakia
86bfb8cd66 Revert "docs: initial commit adding api playground to docs" 
This reverts commit 9d68008152.
 2025-04-09 17:50:13 -07:00
Krrish Dholakia
5ca93a1950 docs: initial commit adding api playground to docs 
makes it easy to see how litellm transforms your request
 2025-04-09 17:50:13 -07:00
yujonglee
1eb9b4ee13
bye (#6982) 2024-12-05 13:38:10 -08:00
yujonglee
4132a97787
bump (#6187) 2024-10-14 18:22:54 +05:30
yujonglee
42174fde4e
update (#6160) 2024-10-11 19:18:56 +05:30
yujonglee
d87e2f92e9 update canary 2024-08-30 21:10:57 -04:00
yujonglee
a04e38a79e update 2024-08-01 10:33:35 +09:00
yujonglee
48a1a2ba26 fix 2024-07-27 15:05:17 +09:00
yujonglee
c54f23f936 wrap existing search bar 2024-07-26 21:46:36 +09:00
yujonglee
3967007595 update to latest 2024-07-26 21:06:53 +09:00
yujonglee
a540c23730 improvements 2024-07-26 12:08:46 +09:00
yujonglee
a9a946a660 install canary (default UI) 2024-07-26 10:41:29 +09:00
Ishaan Jaff
092040afec fix docs build 2024-06-17 11:52:49 -07:00
Ishaan Jaff
eb8b46b445 docs - fix deps 2024-06-15 16:05:32 -07:00
Ishaan Jaff
1806be559d doc fix 2024-06-15 14:22:32 -07:00
Ishaan Jaff
4500bbfe1d bump docusaurus version 2024-06-15 09:11:39 -07:00
Krrish Dholakia
d77e0cc716 docs(config.md): adding docs on parallel request rate limiting 2023-12-07 11:27:48 -08:00
dependabot[bot]
6ead640637
build(deps): bump sharp from 0.32.5 to 0.32.6 in /docs/my-website 
Bumps [sharp](https://github.com/lovell/sharp) from 0.32.5 to 0.32.6.
- [Release notes](https://github.com/lovell/sharp/releases)
- [Changelog](https://github.com/lovell/sharp/blob/main/docs/changelog.md)
- [Commits](https://github.com/lovell/sharp/compare/v0.32.5...v0.32.6)

---
updated-dependencies:
- dependency-name: sharp
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-11-16 18:59:28 +00:00
Krrish Dholakia
6f657df905 update docs 2023-09-20 08:10:54 -07:00
Krrish Dholakia
e6a022ea9e make it easy for people to use sk-litellm 2023-09-18 14:08:05 -07:00
nandini bagga
7690f26ef1 added lunr search bar in docs 2023-08-23 16:04:05 +05:30
Zakhar Kogan
1cdf157ea0 Updated the favicon 2023-08-22 14:50:17 +03:00
Krrish Dholakia
582b536276 adding email based litellm debugger logs 2023-08-21 07:47:05 -07:00
Krrish Dholakia
dc6e93f0d0 updating docs 2023-08-12 11:30:32 -07:00