yuneng-jiang
bdf4acc472
Merge pull request #24468 from BerriAI/litellm_opencode-drop-reasoningSummary-docs
...
docs(opencode): add guidance for dropping reasoningSummary param
2026-03-25 23:00:56 -07:00
Krrish Dholakia
df2a36dd27
docs: document new github + gitlab ci scripts
2026-03-25 20:17:10 -07:00
yuneng-jiang
437341c9b5
Merge pull request #24594 from BerriAI/litellm_gha_pin_helm
...
[Infra] Pins GitHub Action workflows to specific hashes
2026-03-25 18:17:21 -07:00
Yuneng Jiang
b90a0af0d7
remove extra @
2026-03-25 17:46:37 -07:00
Yuneng Jiang
a989587525
re-add helm unit test with checksum pin
2026-03-25 17:38:36 -07:00
Yuneng Jiang
f86b240d7e
pin github scripts + remove unused
2026-03-25 17:38:36 -07:00
ryan-crabbe-berri
0d2b454cec
Merge pull request #24490 from BerriAI/litellm_ryan-march-23
...
Litellm ryan march 23
2026-03-25 16:04:12 -07:00
ishaan-berri
90b850ef8e
Merge pull request #24587 from BerriAI/remove-phone-numbers
...
docs: remove phone numbers from readme and docs
2026-03-25 12:45:42 -07:00
Ishaan Jaffer
a2f02aa139
docs: remove phone numbers from readme and docs
2026-03-25 12:40:40 -07:00
ishaan-berri
67609e04bc
Merge pull request #24584 from BerriAI/worktree-floofy-prancing-crystal
...
security: remove .claude/settings.json and block re-adding via semgrep
2026-03-25 12:28:06 -07:00
Ishaan Jaffer
b77e1ccea6
security: remove .claude/settings.json and add semgrep rule to prevent re-adding
2026-03-25 11:57:43 -07:00
Krrish Dholakia
7d7045cbc1
fix: cleanup
2026-03-25 09:20:25 -07:00
Krrish Dholakia
10a48f7655
docs: add tldr
2026-03-24 19:43:13 -07:00
ishaan-berri
d93ee444fd
Merge pull request #24541 from BerriAI/workflow-deletions
...
ci: remove publish-migrations and reset_stable workflows
2026-03-24 18:53:33 -07:00
Ishaan Jaffer
3e8a6f24b7
ci: remove all publish/deploy workflows as part of supply chain incident response
2026-03-24 18:03:04 -07:00
Ishaan Jaffer
3d5b1ecb3b
ci: remove publish-migrations and reset_stable workflows
2026-03-24 17:59:07 -07:00
ishaan-berri
b26bc5a91c
Merge pull request #24540 from BerriAI/worktree-tingly-jumping-lovelace
...
docs: minor updates to security update blog post
2026-03-24 17:35:01 -07:00
ishaan-berri
e92edee7e7
Merge branch 'main' into worktree-tingly-jumping-lovelace
2026-03-24 17:34:51 -07:00
Ishaan Jaffer
f9d1f8cde6
docs: minor updates to security update blog post
2026-03-24 17:15:44 -07:00
Krrish Dholakia
4571f2a6c1
fix: add tldr to blog post
2026-03-24 16:54:59 -07:00
ishaan-berri
7455b115bf
Merge pull request #24537 from BerriAI/litellm_blog-security-incident
...
docs: add security update blog post for March 2026 supply chain incident
2026-03-24 16:07:45 -07:00
Ryan Crabbe
eaa025ef7d
docs: add security update blog post for March 2026 supply chain incident
2026-03-24 15:54:35 -07:00
Krrish Dholakia
f9d29e4e4e
fix(security_scans.sh): move to older trivvy version, based on https://github.com/BerriAI/litellm/issues/24518#issuecomment-4120401246
2026-03-24 11:19:15 -07:00
Krrish Dholakia
0af114fb3a
Merge pull request #24525 from BerriAI/litellm_pin_trivvy
...
fix(security_scans.sh): pin trivvy version
2026-03-24 09:15:34 -07:00
Krrish Dholakia
fb379865ab
fix(security_scans.sh): pin trivvy version
2026-03-24 09:13:37 -07:00
ryan-crabbe
764b96b1aa
Merge pull request #24486 from BerriAI/litellm_ryan-march-23-audit-log-export
...
docs: add audit log export to S3 documentation
2026-03-23 22:54:39 -07:00
ryan-crabbe
ffbe3896d2
Update docs/my-website/docs/proxy/multiple_admins.md
...
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
2026-03-23 22:54:08 -07:00
ryan-crabbe
4629dfe394
Merge pull request #24485 from BerriAI/litellm_migrate-route-preview-tremor-to-antd
...
chore: migrate route_preview.tsx from Tremor to Ant Design
2026-03-23 22:51:42 -07:00
Ryan Crabbe
57c027a2dc
docs: add audit log export to S3 documentation
2026-03-23 22:46:38 -07:00
Krish Dholakia
9343aeefca
Merge pull request #24413 from benlangfeld/patch-2
...
Correct documentation of completion_model
2026-03-23 22:42:03 -07:00
Ryan Crabbe
7e50af9228
Migrate route_preview.tsx from Tremor to Ant Design
...
Replace Tremor Card/Title/Subtitle with antd Card/Typography equivalents.
2026-03-23 22:32:26 -07:00
ryan-crabbe
fb92ea21bc
Merge pull request #24475 from BerriAI/litellm_fix-sso-return-to-validation
...
fix(proxy): ignore return_to in SSO when control_plane_url is not con…
2026-03-23 22:15:45 -07:00
Ryan Crabbe
e40f68aec4
test(ui): add unit tests for 5 untested frontend components
...
- AntDLoadingSpinner: rendering, prop forwarding, icon styling
- MessageManager: static fallback, custom instance delegation
- claude_code_plugins/helpers: all pure utility functions (15 describe blocks, 55 tests)
- AgentSelector: fetch behavior, loading states, error handling, disabled state
- WorkerDropdown: conditional rendering, worker options, selection changes
2026-03-23 22:03:10 -07:00
Ryan Crabbe
0aadf51342
fix(proxy): ignore return_to in SSO when control_plane_url is not configured
...
Instead of returning a 400 error when return_to is passed without
control_plane_url configured, silently ignore it and proceed with
the normal same-origin SSO flow.
2026-03-23 21:54:29 -07:00
Sameer Kankute
80af635eb1
Fix docs
2026-03-24 09:44:04 +05:30
Sameer Kankute
4e6e566b4d
docs(opencode): fix model prefix and clarify drop_params scope
...
- Use openai/gpt-5 prefix to match existing doc conventions
- Clarify that additional_drop_params must be added to every affected
model entry, not just one
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 09:42:59 +05:30
Sameer Kankute
17e6e7a4cc
docs(opencode): add guidance for dropping reasoningSummary param
...
OpenCode sends a `reasoningSummary` Responses API param with chat
completion requests. Document how to use `additional_drop_params` to
drop it and avoid 400 errors from the OpenAI API.
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-03-24 09:33:28 +05:30
Krish Dholakia
3292d02aa4
Merge pull request #24460 from DmitriyAlergant/ci/skip-scheduled-workflows-on-forks
...
ci: skip scheduled workflows on forks
2026-03-23 19:54:50 -07:00
Krish Dholakia
14fffc2770
Merge pull request #24432 from BerriAI/krrishdholakia/project-id-tracking
...
feat(proxy): add project_alias tracking in callbacks
2026-03-23 19:24:44 -07:00
DmitriyAlergant
1310a275d2
ci: narrow codeql guard to schedule-only
...
Use event_name check so push/PR-triggered CodeQL scans still run on
forks — only the scheduled run is skipped.
2026-03-23 21:39:11 -04:00
DmitriyAlergant
91bc095e18
ci: skip scheduled workflows on forks
...
Add `if: github.repository == 'BerriAI/litellm'` guard to scheduled
jobs in stale.yml, codeql.yml, and create_daily_staging_branch.yml.
This matches the existing pattern in auto_update_price_and_context_window.yml
and prevents these workflows from running unnecessarily on fork repositories.
2026-03-23 21:29:00 -04:00
Krrish Dholakia
26d162ccf4
fix(test): add user_api_key_project_alias to spend logs expected keys
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-23 18:12:50 -07:00
Krrish Dholakia
742e176611
docs(reasoning_content.md): update guide
2026-03-23 17:23:14 -07:00
Krish Dholakia
8a3aa4d31c
Merge pull request #24434 from BerriAI/krrishdholakia/prometheus-spend-metadata
...
feat(prometheus): include spend_logs_metadata in custom labels
2026-03-23 16:52:59 -07:00
Krrish Dholakia
dd0e7dcca8
test(prometheus): add tests for spend_logs_metadata in custom labels
...
Verify that spend_logs_metadata is correctly merged into combined_metadata
and flows through to Prometheus custom labels. Tests cover: basic extraction,
precedence when keys overlap, all three metadata sources combined, and None
handling.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-23 11:02:21 -07:00
Krrish Dholakia
7fa623df91
feat(prometheus): include spend_logs_metadata in custom labels
...
Add spend_logs_metadata to combined_metadata in Prometheus logger so
custom metadata from x-litellm-spend-logs-metadata header can be used
in Prometheus custom labels.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-23 10:59:18 -07:00
Krrish Dholakia
6809213957
feat(proxy): add project_alias tracking through callback metadata pipeline
...
Thread project_alias alongside project_id through the metadata pipeline so
callbacks receive the human-readable project name. DRY up duplicate metadata
dict construction in proxy_track_cost_callback and pass_through_endpoints by
reusing get_sanitized_user_information_from_key — future metadata fields only
need adding in one place.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-23 10:44:17 -07:00
Krish Dholakia
63425b4cb4
Merge pull request #23910 from michelligabriele/fix/guardrail-post-call-logging
...
fix(proxy): post-call guardrail response not captured for logging
2026-03-23 09:21:28 -07:00
michelligabriele
fa7ccf0893
fix(test): add request_data param to test mock + black formatting
2026-03-23 15:43:05 +01:00
michelligabriele
9a231bd758
fix(proxy): use real request_data in Responses API streaming fallback path
2026-03-23 15:39:23 +01:00