feat(container): update image ghcr.io/berriai/litellm (v1.94.1 ➔ v1.95.0)

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/berriai/litellm (source)	minor	v1.94.1 → v1.95.0

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[deepsource-io]

DeepSource Code Review

We reviewed changes in a445f3c...2014812 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Aug 2, 2026 5:57a.m.	Review ↗
Shell		Aug 2, 2026 5:57a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[coderabbitai]

📝 Walkthrough

Walkthrough

The LiteLLM deployment image was updated from v1.94.1 to v1.95.0. Its pinned SHA256 digest was also replaced.

Changes

LiteLLM image update

Layer / File(s)	Summary
Update LiteLLM image reference kubernetes/apps/ai/litellm/instance/proxy.yaml	The deployment now uses LiteLLM v1.95.0 with a new pinned SHA256 digest.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• Tanguille/cluster#4240: Updates the LiteLLM container image version and digest in the same deployment file.
• Tanguille/cluster#4271: Updates the LiteLLM container image version and digest in the same deployment file.

Suggested reviewers: tanguille

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the LiteLLM container image update from v1.94.1 to v1.95.0.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/ghcr.io-berriai-litellm-1.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[tanguille-cluster]

@@ spec.image @@
# litellm.home-operations.com/v1alpha1/LiteLLMProxy/ai/litellm
! ± value change
- ghcr.io/berriai/litellm:v1.94.1@sha256:28b10a635296730007097390939b55f8696ece548530d4ddda3e31c708b4dc81
+ ghcr.io/berriai/litellm:v1.95.0@sha256:af806882b7a6ced41658db5b6a7e98ed7b9b51d03b935e0417bf1c8552d688af

[github-actions]

AI Automated Review

Analysis engine: qwen-3.6-fast@http://litellm.ai.svc.cluster.local/v1 (openai)

Recommendation: Approve

This is a minor, low-risk container image update for litellm from v1.94.1 to v1.95.0. The change strictly updates the image tag and digest in the LiteLLMProxy manifest, which aligns with repository conventions for dependency updates. No configuration changes or breaking API shifts are indicated by the release notes.

Release Notes

The target version v1.95.0 was not found directly in the GitHub Releases API (likely due to rapid RC-to-stable promotion or tagging nuances), but the latest available RC (v1.95.0-rc.3) provides a comprehensive changelog that applies to this stable cut:

User-visible Changes & Fixes:

• Azure AI: Advertised 1M context window for Claude Opus 4.6+ on Foundry.
• MCP: Added RFC 8707 resource indicators on upstream OAuth legs.
• Guardrails: Fixed lazy Router lookup for judge_model credentials; preserved cache_control breakpoints in compress write-back; compressed content-parts messages in headroom guardrail for Anthropic traffic.
• UI: Matched MCP Servers tabs to dashboard line tab pattern; centered vertical toolbar dividers; restored Add MCP Server dialog size/spacing; truncated long team names in models table; validated default team values in Default User Settings.
• Proxy: Sanitized per-key callback config out of logged metadata; rolled up tool spend daily instead of scanning SpendLogs; avoided DB outage during planned RDS IAM rotation.
• Router: Released pre-routing strategy slot when a deployment is replaced or deleted.
• Testing/E2E: Various fixes for race conditions, MCP registration, and prometheus e2e tests.

Breaking Changes: None identified in the RC notes.

Standards Compliance

• Image Format: Uses ghcr.io/berriai/litellm:v1.95.0@sha256:..., adhering to the repo's convention of pinning both tag and digest for reproducibility.
• Scope: Single file change (kubernetes/apps/ai/litellm/instance/proxy.yaml), focused and minimal.
• Workflow: Generated by Renovate, consistent with automated maintenance patterns.

Unknowns or Needs Verification

• Release Availability: The exact v1.95.0 tag returned a 404 in the initial API fetch, though v1.95.0-rc.3 exists and likely represents the same codebase state. The digest provided in the PR (af80688...) should be verified against the official ghcr.io registry if strict provenance checking is required, but given it's a standard Renovate bump, it is assumed valid.
• Digest Provenance: The corpus states "No image digest changes detected in PR diff" under Image Digest Provenance, yet the diff clearly shows a digest change. This appears to be a false negative in the provenance scanner or a mismatch in how the scanner interprets the diff. The manual review confirms the digest is updated correctly.