build(deps): update litellm requirement from >=1.97.0 to >=1.99.0

[dependabot]

User description

Updates the requirements on litellm to permit the latest version.

Release notes

Sourced from litellm's releases.

v1.99.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.99.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.99.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• chore(typing): drop 1.3k basedpyright errors across 30 Any hotspot files by @​mateo-berri in BerriAI/litellm#37073
• fix(proxy): register WebSocket passthrough for OpenAI prefixes by @​LHMQ878 in BerriAI/litellm#36151
• fix(bedrock): report uploaded size in the FileObject returned by managed batch uploads by @​devin-ai-integration[bot] in BerriAI/litellm#36392
• fix(batches): support AWS Bedrock batch cancellation via StopModelInvocationJob by @​ArjunPakhan in BerriAI/litellm#34087
• feat: Async Rust OCR Bridge and MCP OAuth UI Restore by @​ArjunPakhan in BerriAI/litellm#31453
• fix(batches): don't crash logging when a completed batch has no output file by @​MUSE-CODE-SPACE in BerriAI/litellm#34067
• fix(UI): add default model pin to complexity router UI by @​tin-berri in BerriAI/litellm#36615
• feat(ui): add Lite mixed-provider auto-router preset by @​tin-berri in BerriAI/litellm#37068
• feat(ui): link key info header to its user, creator, team, and organization by @​ryan-crabbe-berri in BerriAI/litellm#37187
• fix(guardrails): scan text on /guardrails/apply_guardrail for Azure Content Safety by @​yucheng-berri in BerriAI/litellm#36894
• feat(bedrock): forward LiteLLM identity and metadata into Bedrock requestMetadata by @​yassin-berriai in BerriAI/litellm#36861
• fix(azure): rename max_tokens to max_completion_tokens for gpt-5-chat deployments by @​yassin-berriai in BerriAI/litellm#36857
• fix(bedrock): preserve cache token usage when invocationMetrics replace the usage block by @​brian5021 in BerriAI/litellm#36878
• fix(proxy): registry caches stop per-request tag and end-user Postgres reads in auth by @​ryan-crabbe-berri in BerriAI/litellm#36801
• test(e2e): replay a real tool-search assistant turn back to Bedrock Invoke by @​yassin-berriai in BerriAI/litellm#36856

... (truncated)

Commits

• fa647f7 Merge pull request #39048 from BerriAI/litellm_/docker-build-failure-9f6247
• 5892e30 fix(docker): pin apk python to 3.13 in migrations image
• 91f1a57 fix(docker): bump wolfi-base for glibc 2.44 and pin apk python to 3.13
• d0c8667 Merge pull request #38862 from BerriAI/litellm_/litellm-e2e-rc-1-99-0-11cfd8
• da1d292 test(e2e): measure the select popup after it settles instead of mid-flight
• a2aecfe fix(e2e): only the negative fallback assertion needs every replica to agree
• ab1da05 test(e2e): de-flake the cost-header cache read and the router fallback control
• 1411852 Merge pull request #38855 from BerriAI/litellm_/backport-38251-rc-1-99-0
• f0ee067 fix(anthropic): translate tool_result document blocks in the /v1/messages bridge
• 4b281e7 Merge pull request #38854 from BerriAI/litellm_backport_model_test_dialog_str...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

PR Type

Other

---

Description

• Update litellm minimum version requirement from >=1.97.0 to >=1.99.0

• Apply version bump consistently in both pyproject.toml and requirements.txt

---

Diagram Walkthrough

flowchart LR
  A["litellm >=1.97.0"] -- "version bump" --> B["litellm >=1.99.0"]

Loading

File Walkthrough

	Relevant files
Dependencies	pyproject.toml Bump litellm minimum version to 1.99.0                                      pyproject.toml Updated litellm dependency constraint from >=1.97.0 to >=1.99.0 in project dependencies +1/-1      requirements.txt Bump litellm minimum version to 1.99.0                                      requirements.txt Updated litellm dependency constraint from >=1.97.0 to >=1.99.0 +1/-1

---

[github-actions]

🤖 Approved by Dependabot Autopilot.

[github-actions]

🤖 Autonomous PR Agent Review

📊 Change Overview

• Files Changed: 2
• Lines Added: +2
• Lines Deleted: -2
• Triage Size: size/S

📁 Modified Files (Top 10)

• pyproject.toml (+1/-1)
• requirements.txt (+1/-1)

🛡️ Security & Quality Assessment

• ✅ No hardcoded secrets or suspicious debugging statements detected.

✅ Recommendation

• All automated checks initiated. Ensure CI builds pass before merging.

[rudra-pr-agent]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

[rudra-pr-agent]

PR Code Suggestions ✨

No code suggestions found for the PR.

[github-actions]

🤖 Approved by Dependabot Autopilot.

[github-actions]

🤖 Approved by Dependabot Autopilot.