devin-ai-integration[bot] dfb5d905ea fix(guardrails): block private destinations in custom code http_request and bound guardrail execution time (#43280) ... * fix(guardrails): block private destinations in custom code http_request and bound guardrail execution time * fix(guardrails): keep startup fail-closed on a custom code compile error and report a load timeout on the test endpoint A compile failure is no longer a ValueError, so a config-file custom code guardrail that does not compile stops the proxy at startup as it did before, while POST /guardrails catches it by name and still rolls back. The admin test endpoint reports a module-level timeout as an execution timeout instead of a compile error, a caller-supplied Host header is stripped from http_* requests while validation is on, and GET keeps the shared client's connect timeout. * test(guardrails): cover the http_request methods, header passthrough and cancellation paths --------- Co-authored-by: mateo-berri <277851410+mateo-berri@users.noreply.github.com>		2026-09-26 12:57:41 -07:00
..
a2a_protocol	Merge remote-tracking branch 'origin/main' into litellm_decrease_anys_opus5_r5	2026-09-21 12:57:38 -07:00
anthropic_interface	fix(proxy): send a real error event when a /v1/messages stream fails (#41826)	2026-09-25 15:36:35 -07:00
assistants
batch_completion
batches	refactor: daily fresh tech debt cleanup, rolling PR (2026-09-25) (#43151)	2026-09-26 01:32:55 -07:00
caching	fix(otel): detach post-response service spans by request phase, name redis spans by operation (#43237)	2026-09-26 10:10:12 -07:00
chat_completions	feat(rust-bridge): add cache and secret migration foundations (#42328)	2026-09-22 03:41:04 +00:00
completion_extras	feat(lint): add LIT013 flagging *-ok suppressions that suppress nothing and remove the 240 stale ones (#42793)	2026-09-23 17:50:09 -07:00
compression	merge: main into litellm_headroom_protect_cached_prefix	2026-09-15 04:12:28 +00:00
containers	test: finish the non-proxy half of tests/test_litellm (#43281)	2026-09-25 22:43:41 -07:00
embeddings	feat(embeddings): add native dispatch foundation (#42799)	2026-09-23 21:11:09 +00:00
endpoints/speech/speech_to_completion_bridge
evals
experimental_mcp_client	feat(mcp): configure protocol versions and capability discovery (#43169)	2026-09-25 13:13:52 -07:00
files	feat(xai): add native xAI batches and files support (#42812)	2026-09-25 15:35:20 -07:00
fine_tuning
google_genai	fix(google_genai): drop non-object tool parameters instead of forwarding them	2026-09-19 19:19:33 -07:00
images	Merge branch 'main' into litellm_add_edenai_provider	2026-09-21 19:34:49 +00:00
integrations	fix(otel): detach post-response service spans by request phase, name redis spans by operation (#43237)	2026-09-26 10:10:12 -07:00
interactions	feat(lint): add LIT013 flagging *-ok suppressions that suppress nothing and remove the 240 stale ones (#42793)	2026-09-23 17:50:09 -07:00
litellm_core_utils	fix(otel): detach post-response service spans by request phase, name redis spans by operation (#43237)	2026-09-26 10:10:12 -07:00
llms	feat(proxy): add fail_closed_rate_limit_enforcement to reject requests with 503 while Redis rate limit counters are unreachable (#43251)	2026-09-26 12:11:26 -07:00
messages	feat(rust): hand upstream response headers to the native Messages stream (#43178)	2026-09-25 10:03:15 -07:00
models	fix(vector_stores): keep config-defined vector stores listed and read-only (#42574)	2026-09-23 04:02:16 +00:00
ocr	refactor(ocr): remove the Python OCR execution path and require the Rust route (#43081)	2026-09-24 18:18:50 -07:00
passthrough	fix(responses): fall back on pre-output stream drops, fail truncated streams, honor request_timeout (#43133)	2026-09-25 14:32:41 -07:00
proxy	fix(guardrails): block private destinations in custom code http_request and bound guardrail execution time (#43280)	2026-09-26 12:57:41 -07:00
proxy_auth	refactor(types): replace Any with real types across 29 more backend files	2026-09-08 10:14:07 +00:00
rag	fix(types): read upstream headers through a typed helper	2026-09-21 13:16:58 -07:00
realtime_api	refactor(types): replace Any with proven types in 13 files (#42937)	2026-09-24 09:02:02 -07:00
repositories	Merge remote-tracking branch 'origin/main' into litellm_decrease_anys_opus5_r5	2026-09-21 12:57:38 -07:00
rerank_api	feat(lint): add LIT013 flagging *-ok suppressions that suppress nothing and remove the 240 stale ones (#42793)	2026-09-23 17:50:09 -07:00
responses	fix(responses): run stream failure and success hooks on the iterating loop instead of blocking it (#43270)	2026-09-26 12:22:22 -07:00
router_strategy	fix(router): parse the classifier verdict out of surrounding prose instead of falling to the default tier (#43215)	2026-09-25 16:18:51 -07:00
router_utils	fix(router): match provider-prefixed fallback keys for bare model groups served by wildcard deployments (#43062)	2026-09-24 18:08:56 -07:00
rust_bridge	refactor(rust): expand logging and test coverage across gateway and Anthropic messages (#43295)	2026-09-26 08:04:19 +00:00
sandbox
search
secret_managers	fix(ci): stop stale CI reds, keep unit tests off the host env, retry CyberArk policy conflicts (#43294)	2026-09-26 09:25:13 -07:00
skills	feat(skills): semantic search over the LiteLLM-hosted skill registry (#39401)	2026-09-07 12:28:38 -07:00
types	fix(otel): detach post-response service spans by request phase, name redis spans by operation (#43237)	2026-09-26 10:10:12 -07:00
vector_store_files	refactor(types): replace Any with real types across 54 more backend files	2026-09-08 12:41:07 +00:00
vector_stores	fix(vector_stores): keep config-defined vector stores listed and read-only (#42574)	2026-09-23 04:02:16 +00:00
videos
__init__.py	feat(integrations): add Databricks Zerobus trace logging callback (#42013)	2026-09-25 15:29:23 -07:00
_internal_context.py	fix(otel): detach post-response service spans by request phase, name redis spans by operation (#43237)	2026-09-26 10:10:12 -07:00
_lazy_imports.py	feat(tokenizer): preserve Python defaults with opt-in Rust dispatch (#42174)	2026-09-22 04:41:11 +00:00
_lazy_imports_registry.py	feat(providers): add Nadir intelligent-router provider (nadir/auto) (#33227)	2026-09-24 22:03:30 -07:00
_logging.py	feat(lint): add LIT013 flagging *-ok suppressions that suppress nothing and remove the 240 stale ones (#42793)	2026-09-23 17:50:09 -07:00
_redis.py	fix(redis): authenticate sync clusters with IAM credential providers (#40204)	2026-09-23 17:23:55 -05:00
_redis_credential_provider.py	fix(redis): accept every truthy flag and sign serverless ElastiCache caches	2026-09-10 10:13:03 -04:00
_service_logger.py	fix(otel): detach post-response service spans by request phase, name redis spans by operation (#43237)	2026-09-26 10:10:12 -07:00
_uuid.py
_version.py
anthropic_beta_headers_config.json	feat(router): native compact-to-fit across conversation APIs (#42074)	2026-09-21 22:52:29 -07:00
anthropic_beta_headers_manager.py	fix: drop a blank anthropic-beta header before it reaches the provider	2026-09-19 20:13:59 -07:00
blog_posts.json
budget_manager.py
constants.py	fix(sentry): scrub PII and secrets inside object reprs and nested locals, add SENTRY_SEND_DEFAULT_PII opt-in (#43123)	2026-09-25 14:52:35 -07:00
cost.json
cost_calculator.py	fix(cost): apply a deployment's pricing override to realtime sessions (#43114)	2026-09-24 21:03:59 -07:00
exceptions.py	fix(spend): return 400 from /spend/calculate for a model with no pricing row (#42497)	2026-09-22 15:44:00 -07:00
main.py	feat(providers): add Nadir intelligent-router provider (nadir/auto) (#33227)	2026-09-24 22:03:30 -07:00
model_prices_and_context_window_backup.json	fix(cost-map): price fireworks deepseek v4.1 flash at the prices api value (#43311)	2026-09-26 09:00:00 -07:00
policy_templates_backup.json
provider_endpoints_support_backup.json	Merge pull request #41101 from hMED22/litellm_add_edenai_provider	2026-09-21 16:16:28 -05:00
py.typed
router.py	fix(router): hold Responses lifecycle events until output so a pre-output fallback announces one response (#43238)	2026-09-25 18:16:05 -07:00
scheduler.py
setup_wizard.py	feat(anthropic): add Claude Opus 5.5 (#42489)	2026-09-22 09:52:35 -07:00
timeout.py
utils.py	fix(cost-map): retirement dates, chatgpt reasoning flags, bing pricing, bedrock mantle and mythos, azure gpt-5.6 alias, anthropic batch rates, new nebius, openrouter and xai rows (#42951)	2026-09-25 19:12:36 -07:00