LiteLLM v1.106.3
LiteLLM v1.106.3 rotates the cosign image-signing key for Docker images and Helm charts, and removes the eMudhra root CA from trusted certificate bundles.
原始内容为英文；当前页面提供中文导航与来源说明，具体事实请以原文为准。
为什么值得关注
LiteLLM release v1.106.3 includes an important update to its image-signing infrastructure. Beginning with this release (and backported to versions 1.103.8, 1.104.6, and 1.105.4), Docker images and Helm charts are signed using a new cosign key from commit e82a3c6. Verifications using the prior key from commit 0112e53 will fail, requiring updates to verification scripts, CI pipelines, and Kubernetes admission controllers such as Kyverno, Sigstore policy-controller, or Connaisseur. Additionally, the eMudhra root CA has been removed from all certificate bundles trusted by the SDK, proxy, and Docker images.
可执行摘要
LiteLLM v1.106.3 introduces a breaking deployment change by updating the cosign public key (SHA-256: e3fe3e08c44b16407fe0b37c43b4f8b603b3a0f4ee74c29e647bc022d762c2c0) used for image/chart verification, causing older verification keys to fail. It also removes the eMudhra root CA across SDK, proxy, and Docker certificate bundles.
- Agent 实用度
- 74/100
- 可信度
- 96%
- 机器格式
- JSON + Markdown
开发者应核对什么
- Update cosign verification scripts, CI checks, and admission policies (e.g., Kyverno, Sigstore policy-controller, Connaisseur) with the new cosign.pub from commit e82a3c6 (SHA-256:…
- Verify that services relying on the LiteLLM SDK, proxy, or container images do not depend on the removed eMudhra root CA for TLS connections.