返回全部动态
LiteLLM v1.103.8 更换镜像签名密钥并移除 eMudhra 根 CA
原标题：v1.103.8
AI 摘要
LiteLLM 发布 v1.103.8，共包含 4 个 PR。本次发布更换了用于签名 Docker 镜像和 Helm chart 的 cosign 密钥，旧密钥验证将失败，用户需更新 cosign.pub 及相关 CI 校验和准入策略；同时从 SDK、proxy 和 Docker 镜像的证书信任包中移除了 eMudhra 根 CA，并修复了 otel 回调在 OpenTelemetry 1.44 及以上版本无法初始化的问题。
以上摘要由 AI 生成，可能存在误差。事实请以原文为准。
正文节选
> [!IMPORTANT] > **The image-signing key has changed.** Starting with this release, every Docker image and Helm chart is signed with the new cosign key from commit [`e82a3c6`](https://github.com/BerriAI/litellm/commit/e82a3c646908ba0a6ee0beddc4310d7a6cac4065). Verifying with the previous key from commit `0112e53` will fail. > > Update anything that pins the old `cosign.pub`: `cosign verify` scripts, CI checks, and admission policies such as Kyverno, Sigstore policy-controller or Connaisseur. > >
发布时间：2026-10-24 16:11
抓取时间：2026-10-24 17:14
来源机构：BerriAI