Build(deps): Bump the uv-workspace group across 1 directory with 2 updates - #1488

Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back

Changed

• [services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
• [all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
• [all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
• [all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

• [services] Universal input/output shapes were not replaced properly in service subresources
• [docs] Simplified doc links rendering for services
• [services] Cleaned up unnecessary imports in client.pyi
• [builder] Import records with fallback are always rendered

• See full diff in compare view

Sourced from litellm's releases.

v1.93.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.93.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.93.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• feat(mcp): add entra_obo profile to the token_exchange (OBO) arm by @​tin-berri in BerriAI/litellm#31983
• chore(lint): zero out crash-class pyright rules and ban new type: ignore comments by @​mateo-berri in BerriAI/litellm#32152
• fix(headroom guardrail): log real token/compression stats instead of "allow" by @​krrish-berri-2 in BerriAI/litellm#32158
• fix(anthropic_messages): forward provider response headers on streaming /v1/messages responses by @​mateo-berri in BerriAI/litellm#32160
• fix(bedrock): emit SSE error event when invoke Messages stream ends without message_stop by @​mateo-berri in BerriAI/litellm#32159
• test(e2e): migrate access-control and inference-endpoint regression tests by @​mubashir1osmani in BerriAI/litellm#32016
• test(e2e): close coverage gaps across chat/responses, provider features, batches, prometheus, and langfuse eviction by @​mubashir1osmani in BerriAI/litellm#32165
• chore: add latest model rule to CLAUDE.md by @​mateo-berri in BerriAI/litellm#32164
• ci: gate CircleCI jobs on changed paths by @​ryan-crabbe-berri in BerriAI/litellm#32080
• fix(e2e): register batch + rust OCR deployments via /model/new by @​mubashir1osmani in BerriAI/litellm#32166
• fix: merge websearch tool params by @​krrish-berri-2 in BerriAI/litellm#32162
• test: de-flake langfuse callbacks-in-db e2e test by @​yuneng-berri in BerriAI/litellm#32167
• feat(router): add separate ITPM/OTPM deployment rate limits by @​Sameerlite in BerriAI/litellm#31952
• fix(streaming): surface in-body error payloads on OpenAI-compatible streams by @​yassin-berriai in BerriAI/litellm#32237
• fix(ui): reflect persisted "Store Prompts in Spend Logs" toggle on load by @​devin-ai-integration[bot] in BerriAI/litellm#32145

... (truncated)

• 052b5a2 Merge pull request #33904 from BerriAI/litellm_models_listing_malformed_cost_...
• db190ba fix(proxy): treat malformed cost-map token limits as absent on /v1/models
• 3510494 chore(release): backport #33853 and #33864 onto patch-1.93.0rc2 to complete t...
• 2530e32 chore(release): backport 11 staging PRs onto patch-1.93.0rc2 for the 1.93.0 s...
• b5cd431 Merge pull request #33499 from BerriAI/litellm_backport_1930rc2
• fba058b Merge pull request #32956 from BerriAI/litellm_fix_lit3859_wif_bridge
• 10d5804 Merge pull request #32884 from BerriAI/litellm_internal_staging
• d37ba79 refactor(ui): convert projects page chart to shadcn/recharts (#32722)
• 4baeb28 chore: update Next.js build artifacts (2026-07-11 23:35 UTC, node v20.20.2) (...
• ca877c7 refactor(ui): colocate the usage view, keeping the shared usage components (#...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions