v1.106.1

## Verify this release

```bash
cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.106.1
```

Same command for `litellm-database`, `litellm-non_root` and the `docker.io/litellm/*` images

## What's new in 1.106.1

9 PRs. 6 fixed. 1 needs action

### Action required

- **Vector stores:** Run `db_scripts/strip_vector_store_internal_metadata.py` to fix stores created before this release (#47021)

### Changes

- **Anthropic:** Fixed signed thinking blocks and `thinking.block_binding` being dropped on multi-turn requests (#41362, #46342) <sup>Also in [1.105.2](https://github.com/BerriAI/litellm/releases/tag/v1.105.2)</sup>
- **Chat completions:** Fixed tool calls landing on `choices[1]` with gpt-5.4+ models, broken since v1.97.0 (#46099) <sup>Also in [1.105.2](https://github.com/BerriAI/litellm/releases/tag/v1.105.2)</sup>
- **Batches and files:** Fixed 403 when team keys retrieve, cancel or download their own batches (#47067) <sup>Also in [1.105.2](https://github.com/BerriAI/litellm/releases/tag/v1.105.2)</sup>
- **Vector stores:** Fixed HTTP 400 on metadata updates caused by keys the proxy added to the store (#47021)
- **Token counting:** Fixed undercounted PDFs, system prompts and tools, and rejected Google `countTokens` requests (#47389, #47446, #47454) <sup>Also in [1.104.4](https://github.com/BerriAI/litellm/releases/tag/v1.104.4), [1.105.2](https://github.com/BerriAI/litellm/releases/tag/v1.105.2)</sup>
- **MCP:** Fixed `Tool not found` when calling a bare tool name on `/{server}/mcp`, broken since v1.103.0 (#46225)

---

Backport #47517 · [Full changelog](https://github.com/BerriAI/litellm/compare/v1.106.0...v1.106.1)