Commit graph

36203 commits

Author SHA1 Message Date
Nicholas Gigliotti
cb66672017 Replace hardcoded Bedrock native structured output model set with cost JSON lookup
Move the source of truth for which Bedrock models support native structured
outputs (outputConfig.textFormat) from a hardcoded substring set
(BEDROCK_NATIVE_STRUCTURED_OUTPUT_MODELS) to the cost JSON via a new
"supports_native_structured_output" flag. This makes it possible to add
support for new models (including Claude Sonnet 4.6, which was missing)
by updating the JSON alone, with no code changes needed.
2026-03-26 20:23:12 -04:00
Krrish Dholakia
8f425ec3ff fix: update ioc to include checkmarx.zone 2026-03-26 15:43:01 -07:00
ishaan-berri
6153793f81
Merge pull request #24649 from BerriAI/ishaan-berri-patch-1
Update README.md
2026-03-26 15:22:23 -07:00
ishaan-berri
b69ce9fafa
Update README.md 2026-03-26 15:22:11 -07:00
yuneng-jiang
25feae9f0f
Merge pull request #24607 from BerriAI/litellm_gha_pin_pt_2
[Infra] Pin GHA dependencies and remove unused load test files
2026-03-26 08:47:38 -07:00
yuneng-jiang
bdf4acc472
Merge pull request #24468 from BerriAI/litellm_opencode-drop-reasoningSummary-docs
docs(opencode): add guidance for dropping reasoningSummary param
2026-03-25 23:00:56 -07:00
Yuneng Jiang
84be6f69ef fix google-cloud-aiplatform pin to be compatible with google-genai==1.22.0
Pin to 1.115.0 (latest version that doesn't require google-genai>=1.59.0).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-25 22:37:43 -07:00
Yuneng Jiang
1beb687f54 pin GHA dependencies + remove unused load test files
Pin all pip install commands to exact versions and SHA-pin all GitHub
Actions to prevent supply chain attacks. Remove snok/install-poetry
in favor of direct pip install. Delete orphaned load test scripts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-25 22:32:08 -07:00
Krrish Dholakia
df2a36dd27 docs: document new github + gitlab ci scripts 2026-03-25 20:17:10 -07:00
yuneng-jiang
437341c9b5
Merge pull request #24594 from BerriAI/litellm_gha_pin_helm
[Infra] Pins GitHub Action workflows to specific hashes
2026-03-25 18:17:21 -07:00
Yuneng Jiang
b90a0af0d7 remove extra @ 2026-03-25 17:46:37 -07:00
Yuneng Jiang
a989587525 re-add helm unit test with checksum pin 2026-03-25 17:38:36 -07:00
Yuneng Jiang
f86b240d7e pin github scripts + remove unused 2026-03-25 17:38:36 -07:00
ryan-crabbe-berri
0d2b454cec
Merge pull request #24490 from BerriAI/litellm_ryan-march-23
Litellm ryan march 23
2026-03-25 16:04:12 -07:00
ishaan-berri
90b850ef8e
Merge pull request #24587 from BerriAI/remove-phone-numbers
docs: remove phone numbers from readme and docs
2026-03-25 12:45:42 -07:00
Ishaan Jaffer
a2f02aa139 docs: remove phone numbers from readme and docs 2026-03-25 12:40:40 -07:00
ishaan-berri
67609e04bc
Merge pull request #24584 from BerriAI/worktree-floofy-prancing-crystal
security: remove .claude/settings.json and block re-adding via semgrep
2026-03-25 12:28:06 -07:00
Ishaan Jaffer
b77e1ccea6 security: remove .claude/settings.json and add semgrep rule to prevent re-adding 2026-03-25 11:57:43 -07:00
Krrish Dholakia
7d7045cbc1 fix: cleanup 2026-03-25 09:20:25 -07:00
Krrish Dholakia
10a48f7655 docs: add tldr 2026-03-24 19:43:13 -07:00
ishaan-berri
d93ee444fd
Merge pull request #24541 from BerriAI/workflow-deletions
ci: remove publish-migrations and reset_stable workflows
2026-03-24 18:53:33 -07:00
Ishaan Jaffer
3e8a6f24b7 ci: remove all publish/deploy workflows as part of supply chain incident response 2026-03-24 18:03:04 -07:00
Ishaan Jaffer
3d5b1ecb3b ci: remove publish-migrations and reset_stable workflows 2026-03-24 17:59:07 -07:00
ishaan-berri
b26bc5a91c
Merge pull request #24540 from BerriAI/worktree-tingly-jumping-lovelace
docs: minor updates to security update blog post
2026-03-24 17:35:01 -07:00
ishaan-berri
e92edee7e7
Merge branch 'main' into worktree-tingly-jumping-lovelace 2026-03-24 17:34:51 -07:00
Ishaan Jaffer
f9d1f8cde6 docs: minor updates to security update blog post 2026-03-24 17:15:44 -07:00
Krrish Dholakia
4571f2a6c1 fix: add tldr to blog post 2026-03-24 16:54:59 -07:00
ishaan-berri
7455b115bf
Merge pull request #24537 from BerriAI/litellm_blog-security-incident
docs: add security update blog post for March 2026 supply chain incident
2026-03-24 16:07:45 -07:00
Ryan Crabbe
eaa025ef7d docs: add security update blog post for March 2026 supply chain incident 2026-03-24 15:54:35 -07:00
Krrish Dholakia
f9d29e4e4e fix(security_scans.sh): move to older trivvy version, based on https://github.com/BerriAI/litellm/issues/24518#issuecomment-4120401246 2026-03-24 11:19:15 -07:00
Krrish Dholakia
0af114fb3a
Merge pull request #24525 from BerriAI/litellm_pin_trivvy
fix(security_scans.sh): pin trivvy version
2026-03-24 09:15:34 -07:00
Krrish Dholakia
fb379865ab fix(security_scans.sh): pin trivvy version 2026-03-24 09:13:37 -07:00
ryan-crabbe
764b96b1aa
Merge pull request #24486 from BerriAI/litellm_ryan-march-23-audit-log-export
docs: add audit log export to S3 documentation
2026-03-23 22:54:39 -07:00
ryan-crabbe
ffbe3896d2
Update docs/my-website/docs/proxy/multiple_admins.md
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-03-23 22:54:08 -07:00
ryan-crabbe
4629dfe394
Merge pull request #24485 from BerriAI/litellm_migrate-route-preview-tremor-to-antd
chore: migrate route_preview.tsx from Tremor to Ant Design
2026-03-23 22:51:42 -07:00
Ryan Crabbe
57c027a2dc docs: add audit log export to S3 documentation 2026-03-23 22:46:38 -07:00
Krish Dholakia
9343aeefca
Merge pull request #24413 from benlangfeld/patch-2
Correct documentation of completion_model
2026-03-23 22:42:03 -07:00
Ryan Crabbe
7e50af9228 Migrate route_preview.tsx from Tremor to Ant Design
Replace Tremor Card/Title/Subtitle with antd Card/Typography equivalents.
2026-03-23 22:32:26 -07:00
ryan-crabbe
fb92ea21bc
Merge pull request #24475 from BerriAI/litellm_fix-sso-return-to-validation
fix(proxy): ignore return_to in SSO when control_plane_url is not con…
2026-03-23 22:15:45 -07:00
Ryan Crabbe
e40f68aec4 test(ui): add unit tests for 5 untested frontend components
- AntDLoadingSpinner: rendering, prop forwarding, icon styling
- MessageManager: static fallback, custom instance delegation
- claude_code_plugins/helpers: all pure utility functions (15 describe blocks, 55 tests)
- AgentSelector: fetch behavior, loading states, error handling, disabled state
- WorkerDropdown: conditional rendering, worker options, selection changes
2026-03-23 22:03:10 -07:00
Ryan Crabbe
0aadf51342 fix(proxy): ignore return_to in SSO when control_plane_url is not configured
Instead of returning a 400 error when return_to is passed without
control_plane_url configured, silently ignore it and proceed with
the normal same-origin SSO flow.
2026-03-23 21:54:29 -07:00
Sameer Kankute
80af635eb1 Fix docs 2026-03-24 09:44:04 +05:30
Sameer Kankute
4e6e566b4d docs(opencode): fix model prefix and clarify drop_params scope
- Use openai/gpt-5 prefix to match existing doc conventions
- Clarify that additional_drop_params must be added to every affected
  model entry, not just one

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 09:42:59 +05:30
Sameer Kankute
17e6e7a4cc docs(opencode): add guidance for dropping reasoningSummary param
OpenCode sends a `reasoningSummary` Responses API param with chat
completion requests. Document how to use `additional_drop_params` to
drop it and avoid 400 errors from the OpenAI API.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 09:33:28 +05:30
Krish Dholakia
3292d02aa4
Merge pull request #24460 from DmitriyAlergant/ci/skip-scheduled-workflows-on-forks
ci: skip scheduled workflows on forks
2026-03-23 19:54:50 -07:00
Krish Dholakia
14fffc2770
Merge pull request #24432 from BerriAI/krrishdholakia/project-id-tracking
feat(proxy): add project_alias tracking in callbacks
2026-03-23 19:24:44 -07:00
DmitriyAlergant
1310a275d2 ci: narrow codeql guard to schedule-only
Use event_name check so push/PR-triggered CodeQL scans still run on
forks — only the scheduled run is skipped.
2026-03-23 21:39:11 -04:00
DmitriyAlergant
91bc095e18 ci: skip scheduled workflows on forks
Add `if: github.repository == 'BerriAI/litellm'` guard to scheduled
jobs in stale.yml, codeql.yml, and create_daily_staging_branch.yml.

This matches the existing pattern in auto_update_price_and_context_window.yml
and prevents these workflows from running unnecessarily on fork repositories.
2026-03-23 21:29:00 -04:00
Krrish Dholakia
26d162ccf4 fix(test): add user_api_key_project_alias to spend logs expected keys
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-23 18:12:50 -07:00
Krrish Dholakia
742e176611 docs(reasoning_content.md): update guide 2026-03-23 17:23:14 -07:00