LiteLLM is a GitHub-hosted project for working with and routing language model requests (as suggested by the project name). It’s useful for developers who want a single integration point to use LLMs through LiteLLM.
Project status
- Actively maintained and fast-moving. The GitHub source shows the last upstream push on 2026-07-09, with multiple updates across stable, dev, and release-candidate branches in the last few days, indicating ongoing active development rather than maintenance mode.
- Update cadence appears frequent (daily to near-daily). Examples include v1.90.1, v1.90.2, v1.90.3 (all on 2026-07-03), then v1.91.0 (2026-07-04), v1.91.1 (2026-07-08), and v1.92.0 RCs plus v1.93.0-dev.1 (2026-07-08 to 2026-07-09), suggesting an active release pipeline with short-lived pre-releases.
AI summary generated
Recent updates
v1.92.0
v1.92.0 includes a large batch of fixes across the proxy, streaming, caching, provider-specific request formatting, observability, and UI features such as Interactions API support in the playground. It also documents how LiteLLM Docker images are signed with cosign and provides commands to verify the v1.92.0 image signature.
BreakingSecurityFeaturesv1.93.0-rc.1
v1.93.0-rc.1 includes a large set of fixes across MCP, streaming behavior, provider header forwarding, SSE error handling, and multiple UI/UX updates. It also contains at least one explicitly-marked breaking change related to MCP OAuth configuration, where oauth2_flow handling is tightened to be read verbatim from DB/config. The provided code diff (partial) mainly shows CI/workflow and deployment/packaging-related changes, plus a small backend allowlist update.
BreakingSecurityFeaturesv1.91.3
v1.91.3 is presented in the release notes primarily as a backport, plus guidance about verifying LiteLLM Docker image signatures with cosign. The included release notes do not document any functional runtime changes. The actual diff shows multiple new OpenTelemetry logging/event behaviors and several guardrails content-handling behavior changes.
SecurityFeaturesv1.91.2
v1.91.2 primarily backports a Bedrock fix into the stable/1.91.x line. The release notes also include guidance for verifying LiteLLM Docker image signatures using cosign with a pinned commit or the release tag.
Securityv1.93.0-dev.3
v1.93.0-dev.3 focuses on UI and MCP-related fixes, plus Bedrock and proxy behavioral corrections. Release notes also include guidance for verifying LiteLLM Docker image signatures with cosign.
SecurityFeaturesv1.93.0-dev.2
v1.93.0-dev.2 includes a broad set of fixes across MCP proxy behavior, realtime health checks, response handling, Bedrock cacheControl handling, UI improvements, and observability (OTel). It also introduces new MCP auth modes (true_passthrough, oauth_delegate) and updates model pricing and test/CI reliability.
SecurityFeaturesv1.92.0-rc.2
v1.92.0-rc.2 release notes only mention two items, backporting multiple PRs and rebuilding the dashboard UI bundle. The code diff, however, shows additional functional and developer-impacting changes across the Prisma schema, A2A integration guidance, CI workflows, and build configuration that are not described in the release notes.
BreakingFeaturesv1.91.1
Release v1.91.1 appears to be a backport cut of prior PRs onto the v1.91.x stable branch. The release notes focus on how to verify LiteLLM Docker image signatures with cosign, but they do not describe any functional code behavior changes.
v1.93.0-dev.1
This release focuses on correctness fixes across routing, streaming, billing/batch-cost tracking, and MCP/OAuth behavior, plus a set of CI and Helm housekeeping changes. It also includes security-related improvements, notably documentation for verifying LiteLLM Docker image signatures with cosign.
BreakingSecurityFeaturesv1.92.0-rc.1
v1.92.0-rc.1 is a release candidate that focuses on MCP improvements (including sentinel exposure and OBO token_exchange resolver work), multiple proxy/router hardening fixes, and several UI changes (including a major chat UI migration). It also includes enterprise features such as guardrails, budget alert handling fixes, and Prometheus metric label enhancements.
SecurityFeaturesv1.91.0
v1.91.0 is a large maintenance release with many targeted fixes across the proxy and model adapters (streaming behavior, payload sanitization, Bedrock and Cohere embedding formatting, caching behavior, and test stability), plus multiple UI and observability enhancements. It also adds features such as new Prometheus user budget metrics, an Interactions API endpoint in the playground, and Gemini model support.
SecurityFeaturesv1.90.3
Release v1.90.3 is presented primarily as a stable backport plus Docker image signature verification guidance. The actual code diff, however, includes multiple behavioral changes in the Bedrock Converse request transformation logic (tool schema strictness forwarding, parallel tool use gating, and tool-level cachePoint TTL handling), plus logging redaction changes in the experimental MCP client.
Featuresv1.92.0-dev.2
v1.92.0-dev.2 adds supply-chain guidance for verifying LiteLLM Docker images with cosign, plus a large batch of proxy, UI, MCP, sandbox, and websearch fixes and enhancements. The release notes focus on feature work across those areas, with some CI and linting refactors and a couple dependency bumps.
SecurityFeaturesv1.90.2
Release v1.90.2 is presented as a backport for stable/1.90.x and includes instructions for verifying the LiteLLM Docker image signature using cosign. The provided release notes do not enumerate runtime or API behavior changes beyond the signing/backport chore. The code diff, however, shows several substantial internal behavioral changes across realtime streaming, file upload handling, batch JSONL processing, and proxy auth flows.
Securityv1.90.1
Release v1.90.1 is described as a stable backport cut, with an additional section documenting how to verify LiteLLM Docker image signatures using cosign and a pinned public key/commit hash. The provided release notes do not mention most of the repository and CI changes visible in the code diff.
SecurityFeaturesv1.89.5
Release v1.89.5 primarily documents guidance for verifying LiteLLM Docker image signatures via cosign. The release notes only mention a backport-and-cut chore, but the code diff contains multiple behavioral changes across guardrails, batch processing, file upload handling, observability, and logging integrations.
SecurityFeaturesv1.92.0-dev.1
v1.92.0-dev.1 introduces multiple proxy and A2A-related fixes, including improved handling for unknown models, A2A-sdk 1.x routing for both protocolVersion 0.3 and 1.0 agents, and several realtime and UI correctness fixes. It also adds AES-256-GCM at-rest credential encryption for the proxy, along with a re-encryption migration.
SecurityFeaturesv1.91.0-rc.1
v1.91.0-rc.1 ships a broad set of targeted fixes and a few enhancements around guardrails, MCP behavior, web search streaming/tool_choice synchronization, cost tracking, proxy stream handling, and Prometheus metrics. Release notes also include instructions for verifying LiteLLM Docker image signatures with cosign.
Featuresv1.90.0
v1.90.0 focuses on improving security around LiteLLM Docker image authenticity, adding verification guidance for cosign-signed images. The release also includes many functional fixes across proxy, MCP, Bedrock, and the dashboard UI, including route/migration-related UI changes and more structured rate limit error responses.
SecurityFeaturesv1.91.0-dev.2
v1.91.0-dev.2 includes a mix of provider routing fixes, MCP configuration improvements, and several performance optimizations around realtime streaming and caching. Release notes also call out Docker image signature verification guidance and a Docker base image digest bump intended to address an OpenSSL CVE.
SecurityFeatures