Build(deps): Bump the uv-workspace group across 1 directory with 2 updates - #1486

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

• See full diff in compare view

Sourced from litellm's releases.

v1.92.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.92.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.92.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.92.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(proxy): gate team allowed_passthrough_routes to proxy admins by @​ryan-crabbe-berri in BerriAI/litellm#28097
• fix(tests): stabilize image-edit VCR cassettes to stop live gpt-image-1 spend by @​mateo-berri in BerriAI/litellm#28110
• fix(bedrock/cohere): send embedding_types as JSON array, not string by @​ishaan-berri in BerriAI/litellm#28172
• fix(tests): migrate realtime + rerank tests off shut-down upstream models by @​yuneng-berri in BerriAI/litellm#28191
• fix(caching): replay openai/responses bridge cache hits as chat streams by @​Sameerlite in BerriAI/litellm#28158
• Litellm oss staging by @​Sameerlite in BerriAI/litellm#28161
• feat(prometheus): add user_email and user_alias to user budget metrics by @​Sameerlite in BerriAI/litellm#28155
• test(callbacks): harden flaky proxy callback-leak detector by @​yuneng-berri in BerriAI/litellm#28195
• fix(bedrock): sanitize batch metadata to prevent Pydantic ValidationError by @​mateo-berri in BerriAI/litellm#28202
• fix(deepseek): use native /anthropic/v1/messages endpoint and sanitize tools by @​mateo-berri in BerriAI/litellm#28200
• feat(ui): add Interactions API endpoint to playground with SSE streaming by @​Sameerlite in BerriAI/litellm#28156
• fix(proxy): decode bytes and pass-through SSE for Google-native streamGenerateContent (#27444) by @​Sameerlite in BerriAI/litellm#28213
• refactor(bedrock/sagemaker): switch to lazy loading for response stre… by @​harish-berri in BerriAI/litellm#28189
• [Refactor] UI - Spend Logs: consolidate filter state and extract components by @​ryan-crabbe-berri in BerriAI/litellm#25847
• fix(tests): replace shut-down gpt-4o-audio-preview with gpt-audio-1.5 by @​yuneng-berri in BerriAI/litellm#28281

... (truncated)

• b3086cc chore(release): backport 11 staging PRs onto patch-1.92.0rc2 for the 1.92.0 s...
• 78c5618 Merge pull request #32554 from BerriAI/litellm_ui_rebuild_192rc1
• 0f4f09f chore: update Next.js build artifacts (2026-07-08 23:23 UTC, node v20.20.2)
• d2b4f49 Merge pull request #32553 from BerriAI/litellm_backport_patch_192rc1
• 27b5cfd fix(otel): restore error.* span attributes on v2 error spans (LIT-4179) (#32524)
• c5fa3a8 Merge pull request #32405 from BerriAI/litellm_kraken-remove-envref-gates
• 8c8e4d0 fix(ui/mcp): do not reset in-flight OAuth resume when create modal mounts clo...
• 2d35ea5 feat(otel): stamp gen_ai.response.time_to_first_chunk on streaming LLM spans ...
• b5dee35 Merge pull request #32277 from BerriAI/litellm_/elated-noyce-6fc150
• e1ec215 Merge pull request #32256 from BerriAI/litellm_bedrock_db_env_expansion
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions