LiteLLM is a GitHub-hosted project for working with and routing language model requests (as suggested by the project name). It’s useful for developers who want a single integration point to use LLMs through LiteLLM.
Project status
- Actively maintained: The repo shows multiple recent updates within days in June 2026 (and an upstream push on 2026-06-18), indicating ongoing development rather than dormancy.
- Update cadence: Updates appear to land roughly every 1 to 3 days across v1.84.x to v1.89.1 (notably 2026-06-11 through 2026-06-16), with changes frequently backported to stable branches.
AI summary generated
Recent updates
v1.89.2
Release v1.89.2 release notes are focused on how to verify LiteLLM Docker image signatures with cosign. Aside from a UI rebuild and internal release backports, the notes do not describe any functional changes, but the code diff shows meaningful backend schema and behavior updates.
v1.88.3
v1.88.3 release notes do not describe product behavior changes, they only document how to verify the LiteLLM Docker image signature using cosign and note that this release is a backport of earlier PRs to the stable/1.88.x branch. The detailed changelog is linked externally and the notes themselves contain no functional migration guidance.
v1.89.1
Release v1.89.1 is presented as a backport of a prior patch set plus MCP/model-info/DB fixes. The code diff reveals additional functionality and configuration changes beyond what the release notes describe, especially around MCP server database schema (new env var and OAuth related fields) and gateway routing allowlists.
BreakingFeaturesv1.88.2
v1.88.2 is primarily a maintenance backport release, with release notes focusing on Docker image signature verification guidance and two backport PRs to stable/1.88.x. The changelog text does not enumerate user-facing behavioral changes, but the code diff shows several meaningful modifications across Helm configuration, A2A metadata handling, and OpenTelemetry logging behavior.
BreakingFeaturesv1.87.3
v1.87.3 release notes only mention verifying LiteLLM Docker image signatures (cosign) and a backport/chore PR. The code diff for this release contains multiple functional changes across the proxy database schema, caching and response transformation, cost accounting, guardrail exception handling, and Helm chart defaults.
BreakingFeaturesv1.86.6
v1.86.6 release notes focus on Docker image signing verification using cosign with a pinned public key. The only additional note is a backport/release chore description (backport 1.84.8 patches and dependency updates) without listing functional changes.
Securityv1.89.0
v1.89.0 focuses on adding capabilities for Gemini, Interactions, MCP, and guardrails, along with multiple provider and proxy fixes for streaming and request shaping. It also includes Prometheus metric enrichment and notable performance work to reduce per-chunk overhead on Anthropic and Bedrock streaming paths.
BreakingFeaturesv1.84.8
v1.84.8 release notes mainly document how to verify LiteLLM Docker image signatures with cosign, and that the release was cut from backports to stable/1.84.x (no functional change details). The actual code diff (from v1.87.2 to v1.84.8) shows multiple behavioral and security-relevant modifications that are not described in the release notes.
v1.87.2
Release v1.87.2 provides guidance on verifying LiteLLM Docker image signatures with cosign. Beyond the release-note headline, the code diff shows a large set of operational and behavioral changes including DB schema/migrations, response transformation and caching logic, cost-calculation changes, and Helm chart deployment behavior.
Breakingv1.86.5
v1.86.5 release notes only document backporting PRs into the stable/1.86.x branch and cutting the 1.86.5 tag. The notes additionally describe how to verify the LiteLLM Docker image signatures with cosign using a pinned public key commit. No functional or API changes are described in the release notes.
v1.85.5
Release v1.85.5 is presented primarily as a Docker image signing/verification update using a pinned cosign key commit (0112e53). The documented code changes are limited to a backport set of PRs to stable/1.85.x, plus a version bump; the release notes do not describe functional changes.
Featuresv1.84.7
Release v1.84.7, according to the notes, is a stable backport (from PRs #30064 and #30009) and includes instructions for verifying LiteLLM Docker image signatures with cosign. The provided code diff, however, shows multiple substantive behavioral and security-related code changes that are not described in the release notes.
BreakingSecurityv1.89.0-rc.2
Release v1.89.0-rc.2 notes are essentially a meta change (patching v1.89.0-rc.1, plus a Docker image cosign verification how-to) and do not describe functional product changes. The code diff, however, shows substantial internal and configuration changes, including MCP server database schema extensions and new runtime behavior around env var loading, plus additions of new provider/model identifiers and gateway route allowlisting.
BreakingFeaturesv1.84.6
v1.84.6 release notes focus on verifying LiteLLM Docker image signatures using cosign, and mention a backport for CrowdStrike AIDR metadata capture plus an identity fix. The code diff shows substantially more than that, including security hardening around file handling, logging dispatch changes for streaming success handlers, and Gemini/Vertex tool call payload modifications.
Securityv1.88.1
v1.88.1 is primarily a dependency refresh, bumping pyjwt to 2.13.0 and overriding ws to 8.20.1, plus the usual release version chore. The release notes also add guidance for verifying LiteLLM Docker image signatures using cosign with a pinned commit hash/public key. The provided release notes do not mention the large amount of repository and CI/workflow churn that appears in the actual diff.
Securityv1.88.0
v1.88.0 focuses on improving streaming and payload correctness across multiple providers (notably Bedrock/Cohere and Deepseek), plus fixes in proxy behavior and caching/telemetry. It also adds new UI/API capabilities around Interactions and MCP, enriches Prometheus metrics, and introduces measurable streaming hot-path performance gains. Deployment-related Helm defaults and ServiceAccount behavior changed, and there are security-relevant notes about signed Docker images.
BreakingSecurityFeaturesv1.89.0-rc.1
v1.89.0-rc.1 focuses on correctness fixes across providers, proxy behavior, and observability, along with multiple CI and test reliability improvements. It also adds features related to OpenTelemetry baggage and proxy shutdown handling, plus various MCP and vector-store fixes.
SecurityFeaturesv1.88.0-rc.3
The release notes only document a process change: verifying LiteLLM Docker image signatures with cosign using a pinned immutable commit hash or the protected release tag. No code-level behavior changes are mentioned in the provided release notes.
v1.87.1
v1.87.1 release notes mainly describe operational items around verifying LiteLLM Docker image signatures, plus generic release maintenance backports into the stable/1.87.x line. No functional changes, API changes, or migration steps are explicitly documented in the release notes beyond those backports.
v1.88.0-rc.2
Release v1.88.0-rc.2 is accompanied by documentation on verifying LiteLLM Docker image signatures using cosign. The release notes claim this release is primarily a patch of v1.88.0-rc.1, with fixes related to session-token exemption handling (including GHSA-q775 hardening).
Security