Merge 5890c5c9cb into 851743adcf

.github/workflows/ci-package.yml

@@ -35,7 +35,9 @@ jobs:
           UV_EXCLUDE_NEWER: 5 days
         run: |
           uv venv --python 3.12 /tmp/strix-smoke
-          uv pip install --python /tmp/strix-smoke/bin/python dist/*.whl
+          uv export --frozen --no-hashes --no-emit-project --no-dev -o /tmp/strix-smoke-constraints.txt
+          uv pip install --python /tmp/strix-smoke/bin/python \
+            --constraint /tmp/strix-smoke-constraints.txt dist/*.whl
           /tmp/strix-smoke/bin/strix --version
           /tmp/strix-smoke/bin/strix --help >/dev/null
       - name: Vertex AI and Bedrock dependencies install with the wheel

README.md

@@ -107,6 +107,9 @@ curl -sSL https://strix.ai/install | bash
 
 Installed with pipx, uv, or pip? `strix --update` prints the matching upgrade command instead (`pipx upgrade strix-agent`, `uv tool upgrade strix-agent`, `pip install --upgrade strix-agent`). Strix also shows a notice with the right command when a new version is available.
 
+> [!WARNING]
+> `litellm==1.107.0` on PyPI (2026-10-21, ~11:40–13:20 UTC) contained a credential stealer ([BerriAI/litellm#47826](https://github.com/BerriAI/litellm/issues/47826)). If you installed or upgraded `strix-agent` with pip, pipx, or uv in that window, check `site-packages` for `cook.pth` and follow the remediation in that issue. The standalone binary from `strix.ai/install` was never affected.
+
 ---
 
 ## Ways to Run Strix

pyproject.toml

@@ -35,7 +35,9 @@ classifiers = [
 dependencies = [
   "openai-agents[litellm]>=0.19.0,<0.20",
   "openai>=2.45.0,<3",
-  "litellm>=1.101.0",
+  # Upper bound is deliberate: litellm 1.107.0 (2026-10-21) shipped a credential
+  # stealer from a compromised build. Bump only after reviewing the release.
+  "litellm>=1.101.0,<1.107",
   "google-auth>=2.0.0",
   "boto3>=1.28.0",
   "pydantic>=2.11.3",

uv.lock

@@ -2475,7 +2475,7 @@ requires-dist = [
     { name = "cvss", specifier = ">=3.2" },
     { name = "docker", specifier = ">=7.1.0" },
     { name = "google-auth", specifier = ">=2.0.0" },
-    { name = "litellm", specifier = ">=1.101.0" },
+    { name = "litellm", specifier = ">=1.101.0,<1.107" },
     { name = "markdown-it-py", specifier = ">=3.0.0" },
     { name = "openai", specifier = ">=2.45.0,<3" },
     { name = "openai-agents", extras = ["litellm"], specifier = ">=0.19.0,<0.20" },