LiteLLM 发布 v1.105.0-dev.1,含 cosign 签名验证与多项修复
原标题:v1.105.0-dev.1
AI 摘要
LiteLLM 发布 v1.105.0-dev.1 开发版本,所有 Docker 镜像均使用 cosign 签名,并提供了基于固定 commit hash 和 release tag 两种验证方式。该版本包含大量变更,涵盖 Azure code_interpreter 测试、路由预算 Redis 管道修复、Langfuse SDK 回调迁移至 v4、MCP 协议版本配置与能力发现、SSO 调试路由默认关闭、Sentry PII 脱敏、Bedrock 流式错误处理以及 Databricks Zerobus 追踪日志回调等。
正文节选
## Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](https://github.com/BerriAI/litellm/commit/0112e53046018d726492c814b3644b7d376029d0). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key: ```bash cosign verify \ -