f0f0d554f2
* security: exclude litellm 1.82.8 (supply chain compromise) litellm 1.82.8 on PyPI contains a malicious .pth file that automatically steals credentials on Python startup (no import needed). See: https://github.com/BerriAI/litellm/issues/24512 Our Docker images ship 1.82.6 and are unaffected, but the open version constraints (>=1.0.0, >=1.40.0) would allow resolving to 1.82.8 on fresh installs or lockfile refreshes. * security: cap litellm at <=1.82.6 (1.82.7 also compromised) * chore: regenerate uv.lock and openapi spec * fix: update test to match claude-haiku-4-5 default model name and regenerate docs skill * chore: fix ruff formatting in generate_changelog.py |
||
|---|---|---|
| .. | ||
| benchmarks | ||
| hindsight_dev | ||
| upgrade_tests | ||
| pyproject.toml | ||
| README.md | ||