yucheng e8cee19bee feat(proxy): default at-rest encryption to AES-256-GCM with HKDF v3 and make PyNaCl optional ... New writes use v3:gcm: (AES-256-GCM under HKDF-SHA256). v2:gcm: and unprefixed XSalsa20 values stay readable under the raw SHA-256 derivation they were written with. xsalsa20-poly1305 remains an explicit opt-in and is refused under LITELLM_FIPS_MODE. PyNaCl imports are lazy and a missing PyNaCl on legacy ciphertext raises one error naming the legacy-encryption extra and the re-encrypt path. pynacl moves from the proxy extra to legacy-encryption, which the standard Dockerfiles install Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>		2026-09-24 08:32:05 +00:00
..
litellm-dashboard	feat(proxy): default at-rest encryption to AES-256-GCM with HKDF v3 and make PyNaCl optional	2026-09-24 08:32:05 +00:00
Dockerfile	fix(docker): bump nginx runtime to 1.31.5-alpine3.24 and pin digest to resolve critical CVEs (#39561)	2026-09-03 08:46:07 -07:00
nginx.conf	fix(ui): boot the UI image as an arbitrary uid by anchoring nginx writes under /tmp (#37982)	2026-08-24 11:57:36 -07:00