Build(deps): Bump the uv-workspace group across 1 directory with 2 updates - #1614

• See full diff in compare view

Sourced from litellm's releases.

v1.100.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.100.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.100.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.100.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(responses): keep the conversation when chaining previous_response_id on the bridge by @​mateo-berri in BerriAI/litellm#37956
• feat(newrelic): per-team New Relic trace routing via team callbacks by @​yucheng-berri in BerriAI/litellm#37603
• perf(ci): cache uv dependencies in the lint job by @​yuneng-berri in BerriAI/litellm#37783
• perf(ci): fan the budget checkers out across cores by @​yuneng-berri in BerriAI/litellm#37784
• ci: port the Postgres suites off CircleCI onto service containers by @​yuneng-berri in BerriAI/litellm#37785
• feat(ci): gate patching of SDK internals in tests as TQ008 by @​yuneng-berri in BerriAI/litellm#37787
• ci: measure enterprise/ coverage by @​yuneng-berri in BerriAI/litellm#37788
• ci: run the keyless caching tests that ran in no job by @​yuneng-berri in BerriAI/litellm#37790
• fix(ci): run the migration DDL guard, and stop it reading comments as SQL by @​yuneng-berri in BerriAI/litellm#37791
• ci: run the enterprise package suite in GitHub Actions by @​yuneng-berri in BerriAI/litellm#37798
• perf(ci): give the two longest unit shards the runner's spare cores by @​yuneng-berri in BerriAI/litellm#37804
• test(exception-mapping): pin the status and error-shape table every provider maps to by @​yuneng-berri in BerriAI/litellm#37807
• fix(terraform): add soft_budget, tags, and soft_budget_alerting_emails to litellm_team by @​yuneng-berri in BerriAI/litellm#37918
• fix(ui): theme the created-key box so it follows dark mode by @​yuneng-berri in BerriAI/litellm#37985
• fix(ui): restore the public model name tooltip layout in the add model flow by @​yuneng-berri in BerriAI/litellm#37986

... (truncated)

• e4f2526 Merge pull request #39992 from BerriAI/litellm_rc-1.100.0-wolfi-glibc-2.44
• 13f98f8 fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13 in mig...
• 728dec2 fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13
• 10631eb Merge pull request #38805 from BerriAI/litellm_internal_staging
• 6b33d17 Merge pull request #38850 from BerriAI/litellm_e2e_retry_transient_upstream
• df848d8 Merge pull request #38833 from BerriAI/litellm_deflake_reliability_fallbacks
• 3c2fa5f fix(otel/v2): detach credential-routed tenant spans into their own trace (#38...
• d619b1c feat(helm): make extra ingress paths configurable in the componentized chart ...
• 8e45522 Merge pull request #38852 from BerriAI/litellm_/model-test-connection-artifac...
• 9da0b30 Merge pull request #38843 from BerriAI/litellm_mag_budget_ui
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions