LiteLLM 发布 v1.103.11：镜像签名验证与 SpendLogs 索引修复

AI 摘要

LiteLLM 发布 v1.103.11 版本，所有 Docker 镜像均使用 cosign 签名，并提供了基于固定 commit hash 和 release tag 两种验证方式。该版本主要将自动构建 SpendLogs 索引的修复回移到 stable/1.103.x 分支，并更新版本号。此次更新提升了镜像供应链安全性与代理支出日志的性能。

正文节选

## Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). This release is signed with the key introduced in [commit `e82a3c6`](https://github.com/BerriAI/litellm/commit/e82a3c646908ba0a6ee0beddc4310d7a6cac4065). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the published signing key: ```bash cosign verify \ --key

发布时间：2026-11-11 04:24

抓取时间：2026-11-11 04:42

来源机构：BerriAI