LiteLLM v1.107.0-rc.1

LiteLLM v1.107.0-rc.1 is a release candidate featuring key updates for agentic workflows and platform stability. Key highlights include: - Security & Access Control: Added 'agent access default deny' for enforcing least-privilege access on the proxy. Redis SAML sign-in state sharing without requiring an enabled Redis auth cache. - Model Context Protocol (MCP): Enabled verified stateless protocol capabilities, scoped gateway OAuth consent to x-mcp-servers with explicit scope settings, requested offline access from Google upstream OAuth providers, and stabilized CI shards and Terraform plan diffs for MCP servers. - Provider & Routing Fixes: Bedrock Nova Sonic realtime tool calls now forward with their arguments; Anthropic token count conversion handling updated for OpenAI and Gemini endpoints (returning 400s on unconvertible blocks); legacy thinking keys dropped when rebuilding adaptive thinking. - Performance & Infrastructure: Rust bridge timeouts now honor configured request timeouts; end-user spend resets in committed pages to prevent budget cascade failures on large tables; rate limiting and spend logging fixes for WebSocket turns and Ollama responses. - Breaking Change Note: Terraform configuration now sends additional drop params to the proxy instead of deleting named keys (PR 46782).

• Verify Docker container signatures using cosign and the pinned public key commit hash.
• Review Terraform scripts if managing LiteLLM proxy keys or drop parameters due to the behavioral change in PR 46782.
• Evaluate the new 'agent access default deny' proxy setting when configuring agent permissions under least-privilege policies.
• Check integrations using MCP gateway OAuth scopes and verified stateless capabilities.