LiteLLM 1.103.8 changes its image-signing key

News LLM Inference Infrastructure

  • LiteLLM 1.103.8 uses a new key to sign its Docker images and Helm charts.
  • The former key will not verify this release, so deployments that pin it need updated verification settings.
  • The release removes the eMudhra root CA from the certificate sets trusted by the SDK, proxy, and Docker images.
  • It fixes an initialization failure for the `otel` callback with OpenTelemetry 1.44 and later.

Our take

The signing-key change makes verification setup part of the upgrade: update pinned public keys in CI and cluster admission controls before deploying this version. The notes do not say why the eMudhra root CA was removed or whether systems that rely on it need a replacement trust path.

Sources

  1. litellm v1.103.8 · LiteLLM Releases

Further reading

  1. litellm v1.104.6 · LiteLLM Releases
  2. litellm v1.105.4 · LiteLLM Releases
  3. litellm v1.106.3 · LiteLLM Releases

The summary and analysis were generated by AI. The original sources are authoritative. AI content policy