litellm v1.108.2 — 1.108.2 (LTS)

LiteLLM is an open-source library and proxy server that lets applications call many AI model providers through one interface, and version 1.108.2 is a patch on its long-term support (LTS) line. LTS generally marks releases maintained with small fixes for operators who would rather not follow every feature release, and the notes say the `lts` Docker image tag always points to the newest of them. This patch contains 12 pull requests, 11 fixes and one behavior change, and according to the notes no action is needed to upgrade.

The fixes most likely to matter involve credentials and data exposure. One stops deployments under the `openai/` prefix that have an empty `api_key` from sending the value of `OPENAI_ADMIN_KEY` as their bearer token, the credential attached to each request; the notes do not say which earlier versions were affected. Another stops audio transcription errors from echoing the provider's full reply, transcript included, to clients and into logs. A third fixes spend records being dropped, and valid keys being refused with a 401 error, while Postgres restarts or shuts down. The single behavior change concerns hosted MCP tools, which use the Model Context Protocol for connecting models to tools: when a translated route cannot run one, LiteLLM now returns a clear 400 error, or drops the tool if `drop_params` is set. The remaining fixes are provider- and feature-specific, covering AWS Bedrock, Vertex AI and Gemini text-to-speech, chat completions, the Responses API and routing.

The notes also give a `cosign verify` command for confirming that an image was signed by the project before running it. It checks against the public key from commit `e82a3c6`, the replacement signing key LiteLLM moved to in 1.106.3. Asked about that rotation, a maintainer said it was not routine and that the team had reason to believe the old key was exposed when credentials were stolen in the October 21 compromise of the project's release pipeline. The same command applies to the `litellm-database` and `litellm-non_root` images and to the `docker.io/litellm/*` images.