bump: version 1.96.1 → 1.96.2 (1.96.1 burned by the PyPI storage failure) - #36570
Merged
Conversation
Contributor
Greptile SummaryThis PR advances the LiteLLM release version from 1.96.1 to 1.96.2 after the incomplete 1.96.1 publication.
Confidence Score: 5/5The PR appears safe to merge because the release version is consistently updated and the lockfile remains coordinated with the project metadata. The changed manifests agree on version 1.96.2, independently versioned workspace packages require no coordinated bump, and frozen installations continue using the same pinned third-party dependencies.
|
| Filename | Overview |
|---|---|
| pyproject.toml | Consistently updates the project and Commitizen versions to 1.96.2 without changing dependencies or package behavior. |
| uv.lock | Updates the editable LiteLLM package to 1.96.2 and refreshes expected lock-generation metadata without moving third-party packages. |
Reviews (1): Last reviewed commit: "chore: refresh uv.lock for 1.96.2" | Re-trigger Greptile
yuneng-berri
enabled auto-merge
August 11, 2026 20:43
shin-berri
approved these changes
Aug 11, 2026
1 task
doonga
pushed a commit
to greyrock-labs/home-ops
that referenced
this pull request
Aug 12, 2026
….2) (#315) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/berriai/litellm](https://images.chainguard.dev/directory/image/wolfi-base/overview) ([source](https://github.com/BerriAI/litellm)) | patch | `v1.96.0` → `v1.96.2` | --- ### Release Notes <details> <summary>BerriAI/litellm (ghcr.io/berriai/litellm)</summary> ### [`v1.96.2`](https://github.com/BerriAI/litellm/releases/tag/v1.96.2) [Compare Source](BerriAI/litellm@v1.96.2...v1.96.2) ##### Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](BerriAI/litellm@0112e53). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \ ghcr.io/berriai/litellm:v1.96.2 ``` **Verify using the release tag (convenience):** Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/v1.96.2/cosign.pub \ ghcr.io/berriai/litellm:v1.96.2 ``` Expected output: ``` The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key ``` *** ##### What's Changed - chore(release): backport proxy request-handling maintenance and refresh runtime deps for 1.96.1 by [@​yuneng-berri](https://github.com/yuneng-berri) in [#​36494](BerriAI/litellm#36494) - bump: version 1.96.1 → 1.96.2 (1.96.1 burned by the PyPI storage failure) by [@​yuneng-berri](https://github.com/yuneng-berri) in [#​36570](BerriAI/litellm#36570) **Full Changelog**: <BerriAI/litellm@v1.96.0...v1.96.2> ### [`v1.96.2`](https://github.com/BerriAI/litellm/releases/tag/v1.96.2) [Compare Source](BerriAI/litellm@v1.96.0...v1.96.2) ##### Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](BerriAI/litellm@0112e53). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \ ghcr.io/berriai/litellm:v1.96.2 ``` **Verify using the release tag (convenience):** Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/v1.96.2/cosign.pub \ ghcr.io/berriai/litellm:v1.96.2 ``` Expected output: ``` The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key ``` *** ##### What's Changed - chore(release): backport proxy request-handling maintenance and refresh runtime deps for 1.96.1 by [@​yuneng-berri](https://github.com/yuneng-berri) in [#​36494](BerriAI/litellm#36494) - bump: version 1.96.1 → 1.96.2 (1.96.1 burned by the PyPI storage failure) by [@​yuneng-berri](https://github.com/yuneng-berri) in [#​36570](BerriAI/litellm#36570) **Full Changelog**: <BerriAI/litellm@v1.96.0...v1.96.2> </details> --- ### Configuration 📅 **Schedule**: (in timezone America/New_York) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC43LjQiLCJ1cGRhdGVkSW5WZXIiOiI0NC43LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> Reviewed-on: https://git.greyrock.io/greyrock-labs/home-ops/pulls/315
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps
stable/1.96.xfrom 1.96.1 → 1.96.2. No code changes — version only.Why
The
v1.96.1release run exhausted the PyPI project storage quota partwaythrough the upload, so
1.96.1is now a permanently incomplete release:litellm==1.96.1cp310× 4 platforms, uploaded 2026-08-11 02:31–02:32Z) — no sdist, no cp311–cp314litellm==1.96.0(reference)litellm/litellm:v1.96.1ghcr.io/berriai/litellm:v1.96.1v1.96.1release/v1.96.1PyPI filenames are immutable — the 4 uploaded files can never be replaced. Strictly
speaking the 32 missing files could still be pushed under
1.96.1(the publishsteps run
skip-existing: true, so a re-run would fill the gaps rather than error),but that would ship a stable version whose artifacts come from two different builds
days apart, with no guarantee the rebuilt wheels match the four already on the index.
That's not something to do to a stable release. Treating
1.96.1as burned andmoving to
1.96.2is the clean call.Nothing downstream consumed
1.96.1(no image, no tag, no release branch), so thebump skips nothing and strands nothing.
What's in here
Same two-commit shape as the
1.96.1bump on this line:bump: version 1.96.1 → 1.96.2—pyproject.tomlonly ([project].version+[tool.commitizen].version), produced bycz bump --increment PATCHchore: refresh uv.lock for 1.96.2—uv lockrun with the line's own uv pin(
0.11.7, perDockerfileUV_IMAGE)Total diff: 4 lines across 2 files. The lock refresh moved only the project's
own entry (
litellm 1.96.1 → 1.96.2) plus the rollingexclude-newertimestamp— no third-party package version moved, and
revision = 3/ format fields areunchanged. No git tag was created (tagging is
release.yml's job).Subpackages: not bumped, and that's correct
litellm-enterprise(0.1.53) andlitellm-proxy-extras(0.4.81) are unchangedon this line and are already fully published on PyPI (2 files each, from
2026-08-03 and 2026-07-29 respectively — i.e. before the failed run, not casualties
of it). The publish workflows use
skip-existing: true, so re-publishing them at1.96.2is a no-op rather than an error.Before re-running the release
The storage quota that killed the run is not addressed by this PR. If the PyPI
project limit is still exhausted,
1.96.2will fail exactly the same way and burnanother version — confirm the quota has been raised before dispatching.