🏁 Script executed:

#!/bin/bash
# Description: Check litellm 1.88.1 dependencies and verify it exists

echo "=== Checking litellm 1.88.1 on PyPI ==="
curl -s https://pypi.org/pypi/litellm/1.88.1/json | jq -r '.info | "Version: \(.version)\nExists: true"' || echo "Version 1.88.1 not found"

echo -e "\n=== Checking litellm dependencies for aiohttp ==="
curl -s https://pypi.org/pypi/litellm/1.88.1/json | jq -r '.info.requires_dist[] | select(. | contains("aiohttp"))' || echo "No aiohttp dependency found"

echo -e "\n=== Checking for litellm security advisories ==="
gh api graphql -f query='
{
  securityVulnerabilities(first: 5, ecosystem: PIP, package: "litellm") {
    nodes {
      advisory {
        summary
        severity
      }
      vulnerableVersionRange
      firstPatchedVersion {
        identifier
      }
    }
  }
}'

echo -e "\n=== Verifying hash (first distribution) ==="
curl -s https://pypi.org/pypi/litellm/1.88.1/json | jq -r '.urls[0] | "Filename: \(.filename)\nPyPI SHA256: \(.digests.sha256)"'
echo "Expected (first hash in file): 369b84e57d9426582ddc35e731956ddb6618cda97cc44e4e4d2dfa75982a6e3a"

Repository: lightspeed-core/lightspeed-stack

Length of output: 1593

🌐 Web query:

What changes were introduced in litellm version 1.88.1 compared to 1.83.7? Are there any breaking changes or new dependencies?

💡 Result:

Summary (litellm 1.88.1 vs 1.83.7): 1) What changed between 1.83.7 and 1.88.1 - Between these versions, liteLLM released a large set of changes (feature work, fixes, and reliability improvements) across many interim releases. The most concrete, explicitly stated deltas near the end of the range are in 1.88.0 and the 1.88.1 patch. - In 1.88.0 (released right before 1.88.1), several notable changes were: gating “team allowed_passthrough_routes” to proxy admins, Bedrock/Cohere embedding_types sent as a JSON array (not string), caching behavior for OpenAI responses bridge replayed as chat streams, and Prometheus metric additions for user_email/user_alias; plus other proxy/test fixes and general enhancements [1][2]. - In 1.88.1 specifically, the release notes indicate “build(deps)” dependency bumps: pyjwt to 2.13.0 and a ws override to 8.20.1 (1.88.x), along with a “chore(release)” bump to version 1.88.1 [3]. 2) Breaking changes? - For the overall 1.83.7 → 1.88.1 window: the only explicitly called-out breaking change I found in the sourced material is within the 1.83.7 stable release notes itself (not in the 1.88.1/1.88.0 notes): Prometheus latency histogram bucket boundaries reduced by default from 35 to 18; this can break dashboards/alerts that reference specific le= bucket values, and an env override LATENCY_BUCKETS is mentioned to restore previous boundaries [4]. - The 1.88.1 release item I found is described as a dependency bump (pyjwt and ws override) and does not mention any breaking API/config changes [3]. 3) New dependencies / dependency updates - New/updated dependencies called out for 1.88.1: pyjwt bumped to 2.13.0 and ws override to 8.20.1 (for 1.88.x) [3]. Practical upgrade notes - If you are upgrading from 1.83.7, review your Prometheus dashboards/alerts for latency bucket values (le=...) due to the known breaking change in 1.83.7 stable release notes [4]. - Separately, expect dependency-level changes in 1.88.1: pyjwt 2.13.0 and ws override 8.20.1 [3].

Citations:

• 1: https://github.com/BerriAI/litellm/releases/tag/v1.88.0
• 2: https://newreleases.io/project/github/BerriAI/litellm/release/v1.88.0
• 3: https://github.com/BerriAI/litellm/releases
• 4: https://docs.litellm.ai/release_notes/v1.83.7/v1-83-7-stable