If you run LiteLLM in production, verification scripts and admission policies (Kyverno, Sigstore policy-controller) pinned to the old cosign.pub will now fail. The release also drops the eMudhra root CA from the trust bundles.
Key takeaways · AI-distilled
LiteLLM now signs every Docker image and Helm chart with a new cosign key from commit e82a3c6, and verification with the previous key from commit 0112e53 fails.
Anything pinned to the old cosign.pub has to be updated, which the release notes say includes cosign verify scripts, CI checks, and admission policies such as Kyverno, Sigstore policy-controller or Connaisseur.
The release also removes the eMudhra root CA from every certificate bundle that the LiteLLM SDK, proxy and Docker images trust.
Both the key change and the CA removal are also shipped in 1.103.8, 1.104.6 and 1.105.4, so deployments on those older release lines face the same verification change.
