[dependabot]

Updates the requirements on litellm and fastapi to permit the latest version.
Updates litellm to 1.105.0

Release notes

Sourced from litellm's releases.

v1.105.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.105.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.105.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• feat(mcp): share compatibility-aware result conversion across tool surfaces by @​devin-ai-integration[bot] in BerriAI/litellm#43089
• fix(caching): propagate auth cache invalidation over Redis Cluster via a node-level pub/sub client by @​devin-ai-integration[bot] in BerriAI/litellm#43110
• feat(model-catalog): add Rust registry validation by @​devin-ai-integration[bot] in BerriAI/litellm#43136
• test(rust): reorganize core crate tests and split cache and OCR suites by @​devin-ai-integration[bot] in BerriAI/litellm#43177
• fix(proxy): give SpendLogToolIndex its own share of the cleanup budget and log a per-run summary by @​devin-ai-integration[bot] in BerriAI/litellm#41768
• feat(rust): hand upstream response headers to the native Messages stream by @​devin-ai-integration[bot] in BerriAI/litellm#43178
• feat(testkit): agent clients for Claude Code, Codex and opencode by @​devin-ai-integration[bot] in BerriAI/litellm#43181
• ci: run migrated unit selections on every event in legacy GHA shards by @​yuneng-berri in BerriAI/litellm#43182
• test: move tests/test_litellm root and small trees into tests/unit by @​yuneng-berri in BerriAI/litellm#43186
• fix(sso): gate /sso/debug routes behind ENABLE_SSO_DEBUG, off by default by @​ojensen-berri in BerriAI/litellm#43150
• refactor(framer): replace Framer trait with tokio-util codecs by @​devin-ai-integration[bot] in BerriAI/litellm#43193
• fix(anthropic): surface Responses bridge stream failures as Anthropic error events by @​devin-ai-integration[bot] in BerriAI/litellm#43126
• test: move tests/test_litellm/llms into tests/unit/llms by @​yuneng-berri in BerriAI/litellm#43191
• test: move tests/test_litellm integrations and secret_managers into tests/unit by @​yuneng-berri in BerriAI/litellm#43194
• feat(mcp): configure protocol versions and capability discovery by @​joshua-berri in BerriAI/litellm#43169

... (truncated)

Commits

• 80b9556 Merge pull request #45927 from BerriAI/litellm_ui_bundle_rc_1_105_0
• 919f027 chore: update Next.js build artifacts (2026-10-11 06:00 UTC, node v24.19.0)
• f15af9b feat(ui): backport decision auto-router setup to 1.105 (#45915)
• 2616b1a Merge pull request #45905 from BerriAI/litellm_backport_decisions_rc_1_105_0
• fcbb022 chore(backport): merge rc/1.105.0 and move supported_decisions_providers to l...
• 23fec69 test(unit): flush queued logging tasks after each test so systemone callback ...
• 212b42e chore(backport): regenerate dashboard API types and adapt the picks to rc/1.1...
• f26cff4 feat(sdk): add litellm.systemone and trim litellm.decisions to the OpenAI sha...
• 4032305 test(decisions): bill the OpenAI-format openrouter case from provider-reporte...
• 8f262b2 docs(proxy): describe /v1/decisions and /v1/systemone in Swagger UI (#45838)
• Additional commits viewable in compare view

Updates fastapi to 0.143.0

Release notes

Sourced from fastapi's releases.

0.143.0

Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from OTEL_* environment variables, set FASTAPI_OTEL_AUTO_CONFIGURE=true or use FastAPI(telemetry={"auto_configure": True}) to retain the previous behavior.

Applications that configure their own providers and exporters require no changes. FastAPI Cloud enables automatic setup for you.

Breaking Changes

• 💥 Require opt-in for automatic OpenTelemetry exporter setup. PR #16476 by @​tiangolo.

Commits

• f5c6e9b 🔖 Release version 0.143.0 (#16477)
• 182c8b8 📝 Update release notes
• af889e4 💥 Require opt-in for automatic OpenTelemetry exporter setup (#16476)
• 9269f17 🔖 Release version 0.142.4 (#16471)
• 78ede01 📝 Update release notes
• 4e31a07 🐛 Isolate FastAPI telemetry for excluded requests (#16470)
• cb8dabc 🔖 Release version 0.142.3 (#16469)
• 787dc56 📝 Update release notes
• 6eae2f3 🐛 Cache OpenTelemetry tracers to preserve warning deduplication (#16468)
• 94918c1 📝 Update release notes
• Additional commits viewable in compare view

Updates fastapi to 0.143.0

Release notes

Sourced from fastapi's releases.

0.143.0

Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from OTEL_* environment variables, set FASTAPI_OTEL_AUTO_CONFIGURE=true or use FastAPI(telemetry={"auto_configure": True}) to retain the previous behavior.

Applications that configure their own providers and exporters require no changes. FastAPI Cloud enables automatic setup for you.

Breaking Changes

• 💥 Require opt-in for automatic OpenTelemetry exporter setup. PR #16476 by @​tiangolo.

Commits

• f5c6e9b 🔖 Release version 0.143.0 (#16477)
• 182c8b8 📝 Update release notes
• af889e4 💥 Require opt-in for automatic OpenTelemetry exporter setup (#16476)
• 9269f17 🔖 Release version 0.142.4 (#16471)
• 78ede01 📝 Update release notes
• 4e31a07 🐛 Isolate FastAPI telemetry for excluded requests (#16470)
• cb8dabc 🔖 Release version 0.142.3 (#16469)
• 787dc56 📝 Update release notes
• 6eae2f3 🐛 Cache OpenTelemetry tracers to preserve warning deduplication (#16468)
• 94918c1 📝 Update release notes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions