* security: exclude litellm 1.82.8 (supply chain compromise) litellm 1.82.8 on PyPI contains a malicious .pth file that automatically steals credentials on Python startup (no import needed). See: https://github.com/BerriAI/litellm/issues/24512 Our Docker images ship 1.82.6 and are unaffected, but the open version constraints (>=1.0.0, >=1.40.0) would allow resolving to 1.82.8 on fresh installs or lockfile refreshes. * security: cap litellm at <=1.82.6 (1.82.7 also compromised) * chore: regenerate uv.lock and openapi spec * fix: update test to match claude-haiku-4-5 default model name and regenerate docs skill * chore: fix ruff formatting in generate_changelog.py |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| check_openapi_compatibility.py | ||
| generate_changelog.py | ||
| generate_llms_full.py | ||
| generate_openapi.py | ||
| sync_cookbook.py | ||