v1.83.7-stable
BerriAI/litellmv1.83.7-stableApr 19, 2026by github-actions[bot]
AI Summary
Focuses on security, documentation, and infrastructure improvements, including a new bulk permissions endpoint, AWS Gov Cloud support, and the removal of flaky tests.
Key Highlights
- POST /team/permissions_bulk_update endpoint
- AWS Gov Cloud mode support
- Docker image verification documentation
- Removal of flaky proxy_e2e_azure_batches_tests
New Features
- Bulk permissions update endpoint
- AWS Gov Cloud support
- MCP per-user OAuth token storage
- Bedrock Opus 4.7 support
- Anthropic advisor_20260301 tool type support
Full Release Notes
## Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](https://github.com/BerriAI/litellm/commit/0112e53046018d726492c814b3644b7d376029d0). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \ ghcr.io/berriai/litellm:v1.83.7-stable ``` **Verify using the release tag (convenience):** Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules: ```bash cosign verify \ --key https://raw.githubusercontent.com/BerriAI/litellm/v1.83.7-stable/cosign.pub \ ghcr.io/berriai/litellm:v1.83.7-stable ``` Expected output: ``` The following checks were performed on each of these signatures: - The cosign claims were validated - The signatures were verified against the specified public key ``` --- ## What's Changed * Litellm docs 1 83 3 by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25166 * [Nit] Small docs fix, fixing img + folder name by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25171 * docs: week 1 checklist by @mubashir1osmani in https://github.com/BerriAI/litellm/pull/25083 * [Docs] Add cosign Docker image verification steps to security blog posts by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25122 * [Infra] Remove flaky proxy_e2e_azure_batches_tests CI workflow by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25247 * [Docs] Enforce Black Formatting in Contributor Docs by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25135 * [Infra] Remove Redundant Matrix Unit Test Workflow by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25251 * feat: add POST /team/permissions_bulk_update endpoint by @ryan-crabbe-berri in https://github.com/BerriAI/litellm/pull/25239 * fix: batch-limit stale managed object cleanup to prevent 300K row UPD… by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25258 * bump litellm-enterprise to 0.1.37 by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25265 * bump litellm version to 1.83.4 by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25266 * Litellm aws gov cloud mode support by @shivamrawat1 in https://github.com/BerriAI/litellm/pull/25254 * [Fix] Update check_responses_cost tests for _expire_stale_rows by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25299 * [Test] UI - E2E: Add Playwright tests with local PostgreSQL by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25126 * [Fix] Dockerfile.non_root: handle missing .npmrc gracefully by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25307 * fix(auth): allow JWT override OAuth2 routing without global OAuth2 enablement by @milan-berri in https://github.com/BerriAI/litellm/pull/25252 * [Infra] Pin cosign.pub verification to initial commit hash by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25273 * [Refactor] Align /v2/key/info response handling with v1 by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25313 * Fix node-gyp symlink path after npm upgrade in Dockerfile by @joereyna in https://github.com/BerriAI/litellm/pull/25048 * [Infra] Bump version 1.83.4 → 1.83.5 by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25316 * fix(mcp): block arbitrary command execution via stdio transport by @Sameerlite in https://github.com/BerriAI/litellm/pull/25343 * [Infra] Migrate Redis caching tests from GHA to CircleCI by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25354 * [Feature] UI E2E Tests: Proxy Admin Team and Key Management by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25365 * Add Ramp as a built-in success callback by @kedarthakkar in https://github.com/BerriAI/litellm/pull/23769 * fix(router): tag-based routing broken when encrypted_content_affinity is enabled by @Sameerlite in https://github.com/BerriAI/litellm/pull/25347 * feat(triton): add embedding usage estimation for self-hosted responses by @Sameerlite in https://github.com/BerriAI/litellm/pull/25345 * fix(router): pass custom_llm_provider to get_llm_provider for unprefixed model names by @Sameerlite in https://github.com/BerriAI/litellm/pull/25334 * Litellm oss staging 04 02 2026 p1 by @krrish-berri-2 in https://github.com/BerriAI/litellm/pull/25055 * feat(cost): add baseten model api pricing entries by @Sameerlite in https://github.com/BerriAI/litellm/pull/25358 * feat(proxy): add credential overrides per team/project via model_config metadata by @michelligabriele in https://github.com/BerriAI/litellm/pull/24438 * docs: add Docker Image Security Guide (cosign verification & deployment best practices) by @krrish-berri-2 in https://github.com/BerriAI/litellm/pull/25439 * fix(test): mock headers in test_completion_fine_tuned_model by @joereyna in https://github.com/BerriAI/litellm/pull/25444 * feat(mcp): add per-user OAuth token storage for interactive MCP flows by @csoni-cweave in https://github.com/BerriAI/litellm/pull/25441 * [Fix] UI: improve storage handling and Dockerfile consistency by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25384 * fix(responses-ws): append ?model= to backend WebSocket URL by @joereyna in https://github.com/BerriAI/litellm/pull/25437 * fix(proxy): improve input validation on management endpoints by @jaydns in https://github.com/BerriAI/litellm/pull/25445 * fix(proxy): use parameterized query for combined_view token lookup by @jaydns in https://github.com/BerriAI/litellm/pull/25467 * [Docs] Add missing MCP per-user token env vars to config_settings by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25471 * [Test] UI - Unit tests: raise global vitest timeout and remove per-test overrides by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25468 * [Fix] Harden file path resolution in skill archive extraction by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25475 * refactor: consolidate route auth for UI and API tokens by @ryan-crabbe-berri in https://github.com/BerriAI/litellm/pull/25473 * merge main by @Sameerlite in https://github.com/BerriAI/litellm/pull/25524 * [Fix] Responses WebSocket Duplicate Keyword Argument Error by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25513 * fix(bedrock): avoid double-counting cache tokens in Anthropic Messages streaming usage by @Sameerlite in https://github.com/BerriAI/litellm/pull/25517 * [Fix] Align v1 guardrail and agent list responses with v2 field handling by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25478 * bump: version 1.83.5 → 1.83.6 by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25528 * [Fix] Flush Tremor Tooltip timers in user_edit_view tests by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25480 * [Infra] Merge Dev Branch with Main by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25526 * docs: document april townhall announcements by @krrish-berri-2 in https://github.com/BerriAI/litellm/pull/25537 * feat(anthropic): support advisor_20260301 tool type by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25525 * fix: a2a create a2a client default 60 second timeout by @milan-berri in https://github.com/BerriAI/litellm/pull/25514 * fix(websearch_interception): ensure spend/cost logging runs when stream=True by @Sameerlite in https://github.com/BerriAI/litellm/pull/25424 * fix(responses): map refusal stop_reason to incomplete status in streaming by @Sameerlite in https://github.com/BerriAI/litellm/pull/25498 * feat(guardrails): optional skip system message in unified guardrail inputs by @Sameerlite in https://github.com/BerriAI/litellm/pull/25481 * feat(bedrock): skip dummy user continue for assistant prefix prefill by @Sameerlite in https://github.com/BerriAI/litellm/pull/25419 * feat(containers): Azure routing, managed container IDs, delete response parsing by @Sameerlite in https://github.com/BerriAI/litellm/pull/25287 * fix(logging): preserve proxy key-auth metadata on /v1/messages Langfuse traces by @michelligabriele in https://github.com/BerriAI/litellm/pull/25448 * Reduce default latency histogram bucket cardinality by @J-Byron in https://github.com/BerriAI/litellm/pull/25527 * fix(s3): add retry with exponential backoff for transient S3 503/500 errors by @jimmychen-p72 in https://github.com/BerriAI/litellm/pull/25530 * fix(proxy): preserve dict guardrail HTTPException.detail + bedrock context by @michelligabriele in https://github.com/BerriAI/litellm/pull/25558 * Add "Screenshots / Proof of Fix" section to PR template by @krrish-berri-2 in https://github.com/BerriAI/litellm/pull/25564 * fix(spend): session-TZ-independent date filtering for spend/error log queries by @ryan-crabbe-berri in https://github.com/BerriAI/litellm/pull/25542 * [Fix] Align Org and Team Endpoint Permission Checks by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25554 * Litellm ishaan april10 by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25545 * Add file content streaming support for OpenAI and related utilities by @harish876 in https://github.com/BerriAI/litellm/pull/25450 * [Infra] Merge dev with main by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25568 * Litellm harish april11 by @ishaan-berri in https://github.com/BerriAI/litellm/pull/25569 * [Infra] Build UI for release by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25571 * added applyguardrail to inline iam by @shivamrawat1 in https://github.com/BerriAI/litellm/pull/25241 * Team member permission /spend/logs for team-wide spend logs (UI + RBAC) by @shivamrawat1 in https://github.com/BerriAI/litellm/pull/25458 * [Infra] Rebuild UI by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25573 * fix(proxy): pass-through multipart uploads and Bedrock JSON body by @shivamrawat1 in https://github.com/BerriAI/litellm/pull/25464 * Litellm internal staging 04 11 2026 by @krrish-berri-2 in https://github.com/BerriAI/litellm/pull/25562 * [Infra] Rebuild UI by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25577 * bump: version 1.83.6 → 1.83.7 by @yuneng-berri in https://github.com/BerriAI/litellm/pull/25578 ## New Contributors * @kedarthakkar made their first contribution in https://github.com/BerriAI/litellm/pull/23769 * @jimmychen-p72 made their first contribution in https://github.com/BerriAI/litellm/pull/25530 **Full Changelog**: https://github.com/BerriAI/litellm/compare/v1.83.3-stable...v1.83.7-stable