fix(container): update image ghcr.io/berriai/litellm (v1.102.0 ➔ v1.102.1)

renovate-bot commented

2026-09-23 07:01:42 +02:00

Collaborator

This PR contains the following updates:

Package	Update	Change
ghcr.io/berriai/litellm (source)	patch	`v1.102.0` → `v1.102.1`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

BerriAI/litellm (ghcr.io/berriai/litellm)

`v1.102.1`

Compare Source

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.102.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.102.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.102.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

What's Changed

fix(anthropic): backport #42152 and #42288 to stable/1.102.x for v1.102.1 by @devin-ai-integration[bot] in #42538
feat(typesafe): backport the jev change set to stable/1.102.x for v1.102.1 by @devin-ai-integration[bot] in #42595
chore(release): backport #42388 and #41462 to stable/1.102.x by @devin-ai-integration[bot] in #42618

Full Changelog: https://github.com/BerriAI/litellm/compare/v1.102.0...v1.102.1

Configuration

📅 Schedule: (in timezone Europe/Rome)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/berriai/litellm](https://images.chainguard.dev/directory/image/wolfi-base/overview) ([source](https://github.com/BerriAI/litellm)) | patch | `v1.102.0` → `v1.102.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/6) for more information. --- ### Release Notes <details> <summary>BerriAI/litellm (ghcr.io/berriai/litellm)</summary> ### [`v1.102.1`](https://github.com/BerriAI/litellm/releases/tag/v1.102.1) [Compare Source](https://github.com/BerriAI/litellm/compare/v1.102.0...v1.102.1) #### Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](https://github.com/BerriAI/litellm/commit/0112e53046018d726492c814b3644b7d376029d0). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \ ghcr.io/berriai/litellm:v1.102.1 ``` **Verify using the release tag (convenience):** Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/v1.102.1/cosign.pub \ ghcr.io/berriai/litellm:v1.102.1 ``` Expected output: ``` The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key ``` *** #### What's Changed - fix(anthropic): backport [#42152](https://github.com/BerriAI/litellm/issues/42152) and [#42288](https://github.com/BerriAI/litellm/issues/42288) to stable/1.102.x for v1.102.1 by [@devin-ai-integration](https://github.com/devin-ai-integration)\[bot] in [#42538](https://github.com/BerriAI/litellm/pull/42538) - feat(typesafe): backport the jev change set to stable/1.102.x for v1.102.1 by [@devin-ai-integration](https://github.com/devin-ai-integration)\[bot] in [#42595](https://github.com/BerriAI/litellm/pull/42595) - chore(release): backport [#42388](https://github.com/BerriAI/litellm/issues/42388) and [#41462](https://github.com/BerriAI/litellm/issues/41462) to stable/1.102.x by [@devin-ai-integration](https://github.com/devin-ai-integration)\[bot] in [#42618](https://github.com/BerriAI/litellm/pull/42618) **Full Changelog**: <https://github.com/BerriAI/litellm/compare/v1.102.0...v1.102.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added the

renovate/container

type/patch

labels

2026-09-23 07:01:42 +02:00

renovate-bot added 1 commit

2026-09-23 07:01:42 +02:00

fix(container): update image ghcr.io/berriai/litellm (v1.102.0 ➔ v1.102.1)

Labeler / Labeler (pull_request) Successful in 3s

Details

Lint / actionlint (pull_request) Successful in 5s

Details

Lint / yamllint (pull_request) Successful in 11s

Details

AI PR Review / AI PR Review (pull_request) Successful in 42s

Details

Konflate 1 resource changed

Details

24afbc6965

forgejo-actions added the

area/kubernetes

label

2026-09-23 07:01:45 +02:00

lab-assistant-bot commented

2026-09-23 07:01:46 +02:00

Collaborator

Routine: only container-image and chart-version changes; 1 resource across 1 app

image	from	to	upstream
`ghcr.io/berriai/litellm`	`v1.102.0@sha256:32cfd7…`	`v1.102.1@sha256:87f349…`	❔

_{konflate 0.6.4 · rendered 24afbc6 · full diff →}

**Routine**: only container-image and chart-version changes; 1 resource across 1 app | image | from | to | upstream | |---|---|---|---| | `ghcr.io/berriai/litellm` | `v1.102.0@sha256:32cfd7…` | `v1.102.1@sha256:87f349…` | ❔ | <sub>konflate 0.6.4 · rendered `24afbc6` · [full diff →](https://konflate.aresu.eu/#/pr/2200)</sub>

lab-assistant-bot commented

2026-09-23 07:02:23 +02:00

Collaborator

✅ Automated recommendation: APPROVE

Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)

Recommendation: Approve

Routine patch version update for ghcr.io/berriai/litellm (v1.102.0 → v1.102.1) with pinned SHA digest.

Changed Files

kubernetes/apps/ai/litellm/app/litellmproxy.yaml — single image reference line updated

Review Notes

Konflate rendered diff confirms only the image reference changed; no other resource modifications
No caution flags detected (no data-loss, immutable-field, RBAC, or suspend/prune concerns)
Render completed successfully (exit_code: 0)
Image includes both tag and @sha256: digest per repository convention
Previous litellm update (v1.101.0 → v1.102.0) merged cleanly at commit 267b556d

✅ **Automated recommendation: APPROVE** _Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)_ ## Recommendation: Approve Routine patch version update for `ghcr.io/berriai/litellm` (v1.102.0 → v1.102.1) with pinned SHA digest. ### Changed Files - `kubernetes/apps/ai/litellm/app/litellmproxy.yaml` — single image reference line updated ### Review Notes - Konflate rendered diff confirms only the image reference changed; no other resource modifications - No caution flags detected (no data-loss, immutable-field, RBAC, or suspend/prune concerns) - Render completed successfully (exit_code: 0) - Image includes both tag and `@sha256:` digest per repository convention - Previous litellm update (v1.101.0 → v1.102.0) merged cleanly at commit `267b556d`