Starstruk Logo MarkStarstruk

0.12.5

thesysdev/openui0.12.5Mar 25, 2026by MagMueller

AI Summary

A security-focused release removing a vulnerable dependency (litellm) following a supply chain attack.

Key Highlights

  • Removed litellm from core dependencies
  • Preserved ChatLiteLLM wrapper for manual installation

Breaking Changes

  • litellm removed from pip install browser-use, requiring manual installation if using ChatLiteLLM

Full Release Notes

## Security fix

Remove `litellm` from core dependencies in response to the litellm supply chain attack (versions 1.82.7 & 1.82.8 backdoored on March 24, 2026).

- `pip install browser-use` no longer installs litellm
- `ChatLiteLLM` wrapper is preserved — install litellm separately if needed: `pip install litellm`

See: https://github.com/browser-use/browser-use/pull/4515