chore(deps): bump litellm from 1.102.0 to 1.103.2 in /backend

[dependabot]

Bumps litellm from 1.102.0 to 1.103.2.

Release notes

Sourced from litellm's releases.

v1.103.2

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.103.2

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.103.2/cosign.pub \
  ghcr.io/berriai/litellm:v1.103.2

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• chore(release): sync stable/1.103.x to v1.103.1 by @​yuneng-berri in BerriAI/litellm#43824
• fix(proxy): backport #40541, #43642, and #43656 to stable/1.103.x for v1.103.2 by @​devin-ai-integration[bot] in BerriAI/litellm#43897
• fix(anthropic): backport #42152 and #42288 to stable/1.103.x by @​devin-ai-integration[bot] in BerriAI/litellm#43662
• fix(proxy): backport #43962 to stable/1.103.x by @​yuneng-berri in BerriAI/litellm#43984

Full Changelog: BerriAI/litellm@v1.103.1...v1.103.2

v1.103.1

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

... (truncated)

Commits

• f69b210 Merge pull request #43984 from BerriAI/litellm_backport_lit9020_stable_1_103_x
• 2869a6f fix(proxy): restore pre-config-wins handling of pass-through endpoints (#43962)
• afbda35 Merge pull request #43662 from BerriAI/litellm_backport_safeguards_stable_1_1...
• f146256 Merge pull request #43897 from BerriAI/litellm_backport_usage_attribution_sta...
• fe87252 chore(release): bump litellm-enterprise 0.1.69 -> 0.1.69.post1 for stable/1.1...
• 1bbc9ee test(integration): register the daily activity key metadata contracts on stab...
• 460d51f bump: version 1.103.2
• 97f670a fix(proxy): look up hashed key names with two spend log rows per key (#43656)
• 00b8664 fix(proxy): recover session key owners from daily spend for usage attribution...
• 74952e9 test(integration): add the scratch_database harness helper
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
auto-maintainer	Ready	Preview	Oct 4, 2026 8:39am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: b954328a-d235-428b-b707-f5168f42dcf9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[purvanshjoshi]

Approved: Legitimate dependabot patch/minor update with bug fixes and security improvements.

[purvanshjoshi]

@dependabot rebase

[purvanshjoshi]

@dependabot rebase