fix(deps): bump litellm to 1.89.0 to patch CVE-2026-49468

[mainred]

Summary

• Bump litellm from 1.83.7 to 1.89.3 to fix GHSA-4xpc-pv4p-pm3w / CVE-2026-49468 (Critical, CVSS 9.5).
• Cap project Python at >=3.10,<3.14 because litellm >=1.84.0 declares the same upper bound. A comment in pyproject.toml documents why, and points to the upstream PR that will let us revert the cap.
• Regenerate poetry.lock.

CVE details (GHSA-4xpc-pv4p-pm3w)

Field	Value
Identifiers	CVE-2026-49468 / GHSA-4xpc-pv4p-pm3w
Severity	Critical, CVSS v4 9.5
Type	CWE-290 — Authentication Bypass by Spoofing (Host Header Injection)
Affected	litellm < 1.84.0
Fixed in	litellm 1.84.0

The LiteLLM proxy's auth layer used request.url.path (rebuilt from the Host header by Starlette) to decide which route's auth rules to evaluate. A crafted Host header could make the auth check evaluate a different route than FastAPI actually dispatched, allowing an unauthenticated attacker to reach protected management endpoints. Deployments fronted by a CDN/WAF or reverse proxy that normalizes the Host header are not affected; the safe fix is to upgrade.

Why we limit the Python version

Starting with litellm 1.84.0 (the version that contains the CVE fix), upstream tightened its declared Requires-Python from <4.0,>=3.9 to <3.14,>=3.10. Our project still declared python = "^3.10" (i.e. >=3.10,<4.0), so Poetry can't find a Python range that satisfies both and poetry lock fails.

There is nothing fundamentally broken about litellm on Python 3.14 — the cap is mostly a packaging-policy choice plus a few transitive deps that had stale <3.14 markers. The upstream fix to lift the cap lives in BerriAI/litellm#30687, still open. Once that ships in a release (expected 1.90.x), we can revert this project's cap back to ^3.10. A comment in pyproject.toml records this so we don't forget.

Test plan

• poetry lock resolves cleanly
• make test-without-llm passes
• CI green

Summary by CodeRabbit

• Chores
  • Updated the supported Python version constraint to >=3.10, <3.14, including comments documenting the temporary upper bound.
  • Bumped the litellm dependency to 1.89.0, with notes explaining the temporary cap relationship.
• Tests
  • Refreshed an internet-related test fixture to include additional GitHub session/page UI text so automated checks match current rendering.

[coderabbitai]

Walkthrough

pyproject.toml narrows the Python requirement and bumps litellm. A test fixture also gains additional GitHub session and alert UI text at the top of the captured page content.

Changes

Dependency updates in pyproject.toml

Layer / File(s)	Summary
Python cap and litellm version pin pyproject.toml	Python requirement changed from ^3.10 to >=3.10,<3.14 with comments documenting the temporary upper bound; litellm bumped from 1.83.7 to 1.89.0.

Fixture content refresh

Layer / File(s)	Summary
Fixture top matter update tests/plugins/toolsets/fixtures/test_internet/fixture4_output.md	The start of the fixture adds GitHub signed-in/out, account switch, dismiss alert, and repository header text before the existing page content.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title clearly identifies the main dependency bump and the security fix it targets.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

✅ Docker images ready for 810336f41 (built in 4m 55s)

• us-central1-docker.pkg.dev/robusta-development/temporary-builds/holmes:810336f41
• us-central1-docker.pkg.dev/robusta-development/temporary-builds/holmes-operator:810336f41

⚠️ Warning: does not support ARM (ARM images are built on release only - not on every PR)

Use these tags to pull the images for testing.

📋 Copy commands

⚠️ Temporary images are deleted after 30 days. Copy to a permanent registry before using them:

gcloud auth configure-docker us-central1-docker.pkg.dev
docker pull us-central1-docker.pkg.dev/robusta-development/temporary-builds/holmes:810336f41
docker tag us-central1-docker.pkg.dev/robusta-development/temporary-builds/holmes:810336f41 me-west1-docker.pkg.dev/robusta-development/development/holmes-dev:810336f41
docker push me-west1-docker.pkg.dev/robusta-development/development/holmes-dev:810336f41
docker pull us-central1-docker.pkg.dev/robusta-development/temporary-builds/holmes-operator:810336f41
docker tag us-central1-docker.pkg.dev/robusta-development/temporary-builds/holmes-operator:810336f41 me-west1-docker.pkg.dev/robusta-development/development/holmes-operator-dev:810336f41
docker push me-west1-docker.pkg.dev/robusta-development/development/holmes-operator-dev:810336f41

Patch Helm values in one line (choose the chart you use):

HolmesGPT chart:

helm upgrade --install holmesgpt ./helm/holmes \
  --set registry=me-west1-docker.pkg.dev/robusta-development/development \
  --set image=holmes-dev:810336f41 \
  --set operator.registry=me-west1-docker.pkg.dev/robusta-development/development \
  --set operator.image=holmes-operator-dev:810336f41

Robusta wrapper chart:

helm upgrade --install robusta robusta/robusta \
  --reuse-values \
  --set holmes.registry=me-west1-docker.pkg.dev/robusta-development/development \
  --set holmes.image=holmes-dev:810336f41 \
  --set holmes.operator.registry=me-west1-docker.pkg.dev/robusta-development/development \
  --set holmes.operator.image=holmes-operator-dev:810336f41

[netlify]

✅ Deploy Preview for holmes-docs ready!

Name	Link
🔨 Latest commit	704f0db
🔍 Latest deploy log	https://app.netlify.com/projects/holmes-docs/deploys/6a41bcc9f9c9e10008f0e585
😎 Deploy Preview	https://deploy-preview-2221--holmes-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.