Skip to content

chore(deps): bump litellm from 1.74.9 to 1.83.0 in the uv group across 1 directory#1

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-480c85e8a1
Open

chore(deps): bump litellm from 1.74.9 to 1.83.0 in the uv group across 1 directory#1
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-480c85e8a1

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 3, 2026

Bumps the uv group with 1 update in the / directory: litellm.

Updates litellm from 1.74.9 to 1.83.0

Release notes

Sourced from litellm's releases.

litellm-trace-dev-v1.81.16

What's Changed

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the uv group with 1 update in the / directory: [litellm](https://github.com/BerriAI/litellm).


Updates `litellm` from 1.74.9 to 1.83.0
- [Release notes](https://github.com/BerriAI/litellm/releases)
- [Commits](https://github.com/BerriAI/litellm/commits)

---
updated-dependencies:
- dependency-name: litellm
  dependency-version: 1.83.0
  dependency-type: direct:production
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 3, 2026
@entelligence-ai-pr-reviews
Copy link
Copy Markdown

entelligence-ai-pr-reviews Bot commented Apr 3, 2026

EntelligenceAI PR Summary

Dependency upgrade PR updating pyproject.toml and uv.lock to bring in newer package versions and rationalize the dependency tree.

  • litellm: 1.74.9 → 1.83.0 (9 minor versions, adds fastuuid 0.14.0 as transitive dependency)
  • instructor: 1.11.3 → 1.15.1 (drops diskcache dependency)
  • openai: 1.109.1 → 2.30.0 (major version bump)
  • stagehand: 0.5.3 → 3.19.5 (major overhaul; now ships platform-specific wheels with a leaner dependency set: anyio, distro, httpx, pydantic, sniffio, typing-extensions)
  • Removed packages: anthropic 0.68.0, browserbase 1.4.0, diskcache 5.6.3, nest-asyncio 1.6.0, playwright 1.55.0, pyee 13.0.0
  • greenlet 3.2.4: added musllinux_1_2 wheels for aarch64 and x86_64; removed s390x wheels for Python 3.10–3.13

Confidence Score: 3/5 - Review Recommended

Likely safe but review recommended — this PR includes a major version bump of openai from 1.x to 2.30.0 and a substantial version jump of stagehand from 0.5.3 to 3.19.5, both of which carry high risk of breaking API changes that automated review cannot detect without runtime testing. The litellm and instructor upgrades are more modest but still span multiple minor versions with potential behavioral changes. While no static analysis issues were flagged, the breadth of upstream version jumps — particularly the openai SDK major version — warrants human validation of all call sites and integration tests before merging.

Key Findings:

  • The openai SDK jump from 1.x to 2.30.0 is a major version bump; major versions in the OpenAI Python SDK have historically introduced breaking changes to client initialization, response object shapes, and async interfaces that would silently fail or raise AttributeError at runtime without proper validation.
  • stagehand going from 0.5.3 to 3.19.5 is an extremely large version leap (essentially a full rewrite indicated by the summary mentioning 'major overhaul' and platform-specific wheels), meaning any code in the repo that calls stagehand APIs may need to be updated — this cannot be confirmed without reviewing call sites.
  • The automated review covered 0 of 2 changed files (pyproject.toml and uv.lock), so there is no static analysis coverage; the safety assessment relies entirely on the absence of flagged issues rather than positive confirmation of correctness.
  • On the positive side, instructor 1.15.1 dropping diskcache and litellm adding only fastuuid as a transitive dependency represent clean dependency tree changes with minimal surface area for breakage.
Files requiring special attention
  • pyproject.toml
  • uv.lock

@entelligence-ai-pr-reviews
Copy link
Copy Markdown

Walkthrough

This PR updates several Python dependencies: upgrades litellm from 1.74.9 to 1.83.0, instructor from 1.11.3 to 1.15.1, openai from 1.109.1 to 2.30.0 (major version bump), and stagehand from 0.5.3 to 3.19.5 (major overhaul). Several packages are removed (anthropic, browserbase, playwright, diskcache, nest-asyncio, pyee), and new dependencies (fastuuid, anyio, sniffio) are introduced.

Changes

File(s) Summary
pyproject.toml Bumps litellm dependency from 1.74.9 to 1.83.0.
uv.lock Upgrades litellm (1.74.9→1.83.0, adds fastuuid 0.14.0), instructor (1.11.3→1.15.1, drops diskcache), openai (1.109.1→2.30.0, major bump), and stagehand (0.5.3→3.19.5, replaces anthropic/browserbase/playwright/nest-asyncio/requests/rich/python-dotenv with anyio/distro/httpx/pydantic/sniffio/typing-extensions); removes standalone anthropic, browserbase, diskcache, nest-asyncio, playwright, and pyee; expands greenlet 3.2.4 with musllinux_1_2 wheels for aarch64/x86_64 and removes s390x wheels across Python 3.10–3.13.

Sequence Diagram

This diagram shows the interactions between components:

sequenceDiagram
    participant App as Application
    participant Instructor as Instructor 1.15.1
    participant LiteLLM as LiteLLM 1.83.0
    participant OpenAI as OpenAI SDK 2.30.0
    participant Stagehand as Stagehand 3.19.5
    participant LLMProvider as LLM Provider API

    Note over App, LLMProvider: Upgraded dependency stack
    App->>Instructor: Structured extraction request
    activate Instructor
    Note over Instructor: v1.15.1 - dropped diskcache dependency
    Instructor->>LiteLLM: Route LLM call
    activate LiteLLM
    Note over LiteLLM: v1.83.0 - adds fastuuid
    LiteLLM->>OpenAI: Forward to OpenAI-compatible endpoint
    activate OpenAI
    Note over OpenAI: v2.30.0 (major version bump from 1.x)
    OpenAI->>LLMProvider: API request
    LLMProvider-->>OpenAI: Response
    deactivate OpenAI
    LiteLLM-->>Instructor: LLM response
    deactivate LiteLLM
    Instructor-->>App: Structured output
    deactivate Instructor

    App->>Stagehand: Browser automation request
    activate Stagehand
    Note over Stagehand: v3.19.5 - major refactor
    Note over Stagehand: Dropped: playwright, browserbase,<br/>anthropic, openai, litellm, nest-asyncio<br/>Now: lightweight HTTP client only
    Stagehand->>LLMProvider: Direct HTTP request (httpx)
    LLMProvider-->>Stagehand: Response
    Stagehand-->>App: Result
    deactivate Stagehand
Loading

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants