LiteLLM v1.105.4：更换镜像签名密钥并移除 eMudhra 根 CA
原标题：v1.105.4
AI 摘要
LiteLLM 发布 v1.105.4，共包含 4 个 PR，其中 1 项需要用户采取行动：Docker 镜像与 Helm chart 的 cosign 签名密钥已更换为 commit e82a3c6 中的新密钥，使用旧密钥（commit 0112e53）验证将失败。同时，SDK、proxy 与 Docker 镜像的证书信任包中移除了 eMudhra 根 CA。用户需更新 cosign.pub 引用及 Kyverno、Sigstore policy-controller、Connaisseur 等准入策略。
正文节选
> [!IMPORTANT] > **The image-signing key has changed.** Starting with this release, every Docker image and Helm chart is signed with the new cosign key from commit [`e82a3c6`](https://github.com/BerriAI/litellm/commit/e82a3c646908ba0a6ee0beddc4310d7a6cac4065). Verifying with the previous key from commit `0112e53` will fail. > > Update anything that pins the old `cosign.pub`: `cosign verify` scripts, CI checks, and admission policies such as Kyverno, Sigstore policy-controller or Connaisseur. > >