v1.103.2 v1.104.0
BerriAI/litellmOct 1, 2026 → Oct 3, 20263 days between releases
What's New
Introduces breached password detection and forces master key configuration
Breaking Changes
- Refuse to start with an unset, empty, or publicly known master key
New Features
- Breached password detection in password policy
- Self-service password change functionality
- Force password reset for breached or admin-set passwords
- Standardized unit test suite structure
- Type safety improvements across 30 files
Improvements
- Proxy performance improvements for /model/info listing
- Refactoring of types to use proven types instead of generic Any
- build(deps): re-suppress GHSA-h7x2-h6g9-p789 in osv-scan
Upgrade Notes
Ensure your master key is configured before upgrading, as the application refuses to start with an unset, empty, or publicly known key. Review your authentication policies to accommodate the new breached password detection features.
The Two Releases
v1.103.2
Oct 1, 2026· 21 days ago
Backports multiple fixes for proxy functionality, including webhook alerts and access logs, as well as Anthropic stream error handling to the stable 1.103.x branch.
Full release notesv1.104.0
Oct 3, 2026· 18 days ago
This release introduces significant security enhancements for authentication, including password breach detection and forced resets, alongside a major refactoring of the test suite to standardize unit testing. It also includes proxy performance improvements and type safety updates.
Full release notes