LiteLLM 发布 v1.104.9：镜像签名验证与 SpendLogs 索引修复
原标题：v1.104.9
AI 摘要
LiteLLM 发布 v1.104.9 版本，所有 Docker 镜像均使用 cosign 签名，并提供了基于固定 commit hash 和 release tag 两种验证方式。该版本将自动构建 SpendLogs 索引的修复回移到 stable/1.104.x 分支，同时把 litellm 升级至 1.104.9、litellm-proxy-extras 升级至 0.4.102.post2。此次更新主要面向使用 LiteLLM 代理的用户，提升镜像供应链安全性与支出日志查询性能。
正文节选
## Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). This release is signed with the key introduced in [commit `e82a3c6`](https://github.com/BerriAI/litellm/commit/e82a3c646908ba0a6ee0beddc4310d7a6cac4065). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the published signing key: ```bash cosign verify \ --key