litellm

## Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](https://github.com/BerriAI/litellm/commit/0112e53046018d726492c814b3644b7d376029d0). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \ ghcr.io/berriai/litellm:v1.92.0 ``` **Verify using the release tag (convenience):** Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/v1.92.0/cosign.pub \ ghcr.io/berriai/litellm:v1.92.0 ``` Expected output: ``` The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key ``` --- ## What's Changed * fix(proxy): gate team allowed_passthrough_routes to proxy admins by @ryan-crabbe-berri in https://github.com/BerriAI/litellm/pull/28097 * fix(tests): stabilize image-edit VCR cassettes to stop live gpt-image-1 spend by @mateo-berri in https://github.com/BerriAI/litellm/pull/28110 * fix(bedrock/cohere): send embedding_types as JSON array, not string by @ishaan-berri in https://github.com/BerriAI/litellm/pull/28172 * fix(tests): migrate realtime + rerank tests off shut-down upstream models by @yuneng-berri in https://github.com/BerriAI/litellm/pull/28191 * fix(caching): replay openai/responses bridge cache hits as chat streams by @Sameerlite in https://github.com/BerriAI/litellm/pull/28158 * Litellm oss staging by @Sameerlite in https://github.com/BerriAI/litellm/pull/28161 * feat(prometheus): add user_email and user_alias to user budget metrics by @Sameerlite in https://github.com/BerriAI/litellm/pull/28155 * test(callbacks): harden flaky proxy callback-leak detector by @yuneng-berri in https://github.com/BerriAI/litellm/pull/28195 * fix(bedrock): sanitize batch metadata to prevent Pydantic ValidationError by @mateo-berri in https://github.com/BerriAI/litellm/pull/28202 * fix(deepseek): use native /anthropic/v1/messages endpoint and sanitize tools by @mateo-berri in https://github.com/BerriAI/litellm/pull/28200 * feat(ui): add Interactions API endpoint to playground with SSE streaming by @Sameerlite in https://github.com/BerriAI/litellm/pull/28156 * fix(proxy): decode bytes and pass-through SSE for Google-native streamGenerateContent (#27444) by @Sameerlite in https://github.com/BerriAI/litellm/pull/28213 * refactor(bedrock/sagemaker): switch to lazy loading for response stre… by @harish-berri in https://github.com/BerriAI/litellm/pull/28189 * [Refactor] UI - Spend Logs: consolidate filter state and