LiteLLM v1.108.0 发布：镜像签名验证与多项修复

AI 摘要

LiteLLM 发布 v1.108.0，所有 Docker 镜像均使用 cosign 签名，并提供了基于固定 commit hash 和 release tag 的两种验证方式。该版本集中修复了 A2A 协议、Bedrock、Anthropic、Azure AI、代理透传、视频与文件路由等多处问题，并新增 Azure AI Entra ID/OAuth 认证、Gemini Family 自动路由预设、/v1/rag/ingest 向量库上传安全控制等功能。

正文节选

## Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). This release is signed with the key introduced in [commit `e82a3c6`](https://github.com/BerriAI/litellm/commit/e82a3c646908ba0a6ee0beddc4310d7a6cac4065). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the published signing key: ```bash cosign verify \ --key

发布时间：2026-11-04 11:35

抓取时间：2026-11-04 11:45

来源机构：BerriAI