Build(deps): Bump the uv-workspace group across 1 directory with 2 updates - #1511

• See full diff in compare view

Sourced from litellm's releases.

v1.96.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.96.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.96.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.96.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• feat(prometheus): add service_tier label to latency and spend metrics by @​yassin-berriai in BerriAI/litellm#34966
• fix(aiohttp): keep keep-alive connector config when a session is rebuilt by @​yassin-berriai in BerriAI/litellm#34962
• fix(helm): pin bundled postgres and redis to the bitnamilegacy images by @​yassin-berriai in BerriAI/litellm#34963
• fix(vertex): decide rawPredict passthrough streaming from the request body by @​tin-berri in BerriAI/litellm#34672
• fix(anthropic-adapter): translate stop_sequences and disabled thinking for non-Claude targets by @​tin-berri in BerriAI/litellm#34589
• ci: publish a generated JSON schema for model_prices_and_context_window.json by @​mateo-berri in BerriAI/litellm#34816
• fix(jwt_auth): allow /v1/messages for JWT teams by default by @​devin-ai-integration[bot] in BerriAI/litellm#34222
• fix(proxy): skip team model aliases that point at deleted deployments by @​mateo-berri in BerriAI/litellm#34993
• fix(proxy): report when a model write does not survive the post-write reload by @​tin-berri in BerriAI/litellm#34861
• fix(proxy): reject model writes that corrupt an auto-router pseudo-model by @​tin-berri in BerriAI/litellm#34151
• fix(router_strategy): serialize latency for non-chat responses in lowest-latency routing by @​mihidumh in BerriAI/litellm#33290
• fix(logging): preserve callback order in get_combined_callback_list by @​Harsh23Kashyap in BerriAI/litellm#33008
• fix(router): honor explicit priority=0 in acompletion by @​Harsh23Kashyap in BerriAI/litellm#33214
• fix(router_strategy): serialize latency for non-chat responses in lowest-latency routing by @​tin-berri in BerriAI/litellm#35048
• fix(anthropic-adapter): open the first content block with the real upstream type so reasoning-first streams start with thinking by @​Napuh in BerriAI/litellm#34433

... (truncated)

• 8843766 Merge pull request #36320 from BerriAI/litellm_/litellm-1-96-0-release-ui-48fbeb
• d6f5338 chore: update Next.js build artifacts (2026-08-08 23:40 UTC, node v20.20.2)
• 2c2e9fd Merge pull request #36294 from BerriAI/litellm_backport_rc_1_96_0_bp-rc196-0808
• 4788d34 chore(deps): carry the pypdf scanner exceptions from staging
• c5026e1 chore(deps): bump js-yaml, brace-expansion, postcss and nanoid in the dashboard
• 502b03b chore(deps): bump cryptography to 50.0.0
• 7cdb02a chore(deps): bump h2 to 4.4.1
• 737881e chore(deps): bump gitpython to 3.1.58
• f4cef64 Merge pull request #35844 from BerriAI/litellm_/terraform-provider-dep-bump-5...
• ca18a2a Merge pull request #35835 from BerriAI/litellm_/elated-margulis-7f300f
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions