Skip to content

[Fix] Pin uv/pip versions and fix bare prisma calls in CI

4b6eb02
Select commit
Loading
Failed to load commit list.
Merged

Litellm oss staging 04 09 2026 #25463

[Fix] Pin uv/pip versions and fix bare prisma calls in CI
4b6eb02
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Apr 10, 2026 in 3s

25 new alerts including 17 errors

New alerts in code changed by this pull request

  • 17 errors
  • 8 notes

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check notice on line 6 in ui/litellm-dashboard/src/components/mcp_tools/mcp_server_edit.test.tsx

See this annotation in the file changed.

Code scanning / CodeQL

Unused variable, import, function or class Note

Unused import NotificationsManager.

Check failure on line 100 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'update_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of update_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'update_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of update_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'update_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of update_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 99 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'store_user_oauth_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of store_user_oauth_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'store_user_oauth_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of store_user_oauth_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'store_user_oauth_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of store_user_oauth_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 98 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'store_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of store_user_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'store_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of store_user_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'store_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of store_user_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 97 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'reject_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of reject_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'reject_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of reject_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'reject_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of reject_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 96 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'list_user_oauth_credentials' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of list_user_oauth_credentials occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'list_user_oauth_credentials' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of list_user_oauth_credentials occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'list_user_oauth_credentials' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of list_user_oauth_credentials occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 95 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'get_user_oauth_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_user_oauth_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_user_oauth_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_user_oauth_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_user_oauth_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_user_oauth_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 94 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'get_mcp_submissions' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_submissions occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_mcp_submissions' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_submissions occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_mcp_submissions' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_submissions occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 93 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'get_mcp_servers' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_servers occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_mcp_servers' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_servers occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_mcp_servers' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_servers occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 92 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'get_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 91 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'get_all_mcp_servers_for_user' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_all_mcp_servers_for_user occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_all_mcp_servers_for_user' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_all_mcp_servers_for_user occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'get_all_mcp_servers_for_user' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of get_all_mcp_servers_for_user occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 90 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'delete_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of delete_user_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'delete_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of delete_user_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'delete_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of delete_user_credential occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 89 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'delete_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of delete_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'delete_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of delete_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'delete_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of delete_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 88 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'create_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of create_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'create_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of create_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'create_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of create_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 87 in litellm/proxy/management_endpoints/mcp_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'approve_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of approve_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'approve_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of approve_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.
'approve_mcp_server' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.mcp_management_endpoints
, as the
definition
of approve_mcp_server occurs after the cyclic
import
of litellm.proxy.management_endpoints.mcp_management_endpoints.

Check failure on line 39 in litellm/proxy/management_endpoints/key_management_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'rotate_mcp_server_credentials_master_key' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.key_management_endpoints
, as the
definition
of rotate_mcp_server_credentials_master_key occurs after the cyclic
import
of litellm.proxy.management_endpoints.key_management_endpoints.
'rotate_mcp_server_credentials_master_key' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.key_management_endpoints
, as the
definition
of rotate_mcp_server_credentials_master_key occurs after the cyclic
import
of litellm.proxy.management_endpoints.key_management_endpoints.
'rotate_mcp_server_credentials_master_key' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy.management_endpoints.key_management_endpoints
, as the
definition
of rotate_mcp_server_credentials_master_key occurs after the cyclic
import
of litellm.proxy.management_endpoints.key_management_endpoints.

Check failure on line 24 in litellm/proxy/_experimental/mcp_server/db.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'get_async_httpx_client' may not be defined if module
litellm.llms.custom_httpx.http_handler
is imported before module
litellm.proxy._experimental.mcp_server.db
, as the
definition
of get_async_httpx_client occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.db.
'get_async_httpx_client' may not be defined if module
litellm.llms.custom_httpx.http_handler
is imported before module
litellm.proxy._experimental.mcp_server.db
, as the
definition
of get_async_httpx_client occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.db.
'get_async_httpx_client' may not be defined if module
litellm.llms.custom_httpx.http_handler
is imported before module
litellm.proxy._experimental.mcp_server.db
, as the
definition
of get_async_httpx_client occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.db.
'get_async_httpx_client' may not be defined if module
http_handler
is imported before module
litellm.proxy._experimental.mcp_server.db
, as the
definition
of get_async_httpx_client occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.db.
'get_async_httpx_client' may not be defined if module
http_handler
is imported before module
litellm.proxy._experimental.mcp_server.db
, as the
definition
of get_async_httpx_client occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.db.
'get_async_httpx_client' may not be defined if module
http_handler
is imported before module
litellm.proxy._experimental.mcp_server.db
, as the
definition
of get_async_httpx_client occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.db.

Check failure on line 29 in litellm/proxy/_experimental/mcp_server/byok_oauth_endpoints.py

See this annotation in the file changed.

Code scanning / CodeQL

Module-level cyclic import Error

'store_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy._experimental.mcp_server.byok_oauth_endpoints
, as the
definition
of store_user_credential occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.byok_oauth_endpoints.
'store_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy._experimental.mcp_server.byok_oauth_endpoints
, as the
definition
of store_user_credential occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.byok_oauth_endpoints.
'store_user_credential' may not be defined if module
litellm.proxy._experimental.mcp_server.db
is imported before module
litellm.proxy._experimental.mcp_server.byok_oauth_endpoints
, as the
definition
of store_user_credential occurs after the cyclic
import
of litellm.proxy._experimental.mcp_server.byok_oauth_endpoints.

Check notice on line 1021 in litellm/proxy/_experimental/mcp_server/server.py

See this annotation in the file changed.

Code scanning / CodeQL

Empty except Note

'except' clause does nothing but pass and there is no explanatory comment.

Check notice on line 247 in litellm/proxy/_experimental/mcp_server/oauth2_token_cache.py

See this annotation in the file changed.

Code scanning / CodeQL

Cyclic import Note

Import of module
litellm.proxy.proxy_server
begins an import cycle.
Import of module
proxy_server
begins an import cycle.

Check notice on line 225 in litellm/proxy/_experimental/mcp_server/oauth2_token_cache.py

See this annotation in the file changed.

Code scanning / CodeQL

Cyclic import Note

Import of module
litellm.proxy.proxy_server
begins an import cycle.
Import of module
proxy_server
begins an import cycle.

Check notice on line 195 in litellm/proxy/_experimental/mcp_server/oauth2_token_cache.py

See this annotation in the file changed.

Code scanning / CodeQL

Cyclic import Note

Import of module
litellm.proxy.proxy_server
begins an import cycle.
Import of module
proxy_server
begins an import cycle.

Check notice on line 28 in litellm/proxy/_experimental/mcp_server/oauth2_token_cache.py

See this annotation in the file changed.

Code scanning / CodeQL

Cyclic import Note

Import of module
litellm.proxy.common_utils.encrypt_decrypt_utils
begins an import cycle.

Check notice on line 2472 in litellm/proxy/_experimental/mcp_server/mcp_server_manager.py

See this annotation in the file changed.

Code scanning / CodeQL

Cyclic import Note

Import of module
litellm.proxy._experimental.mcp_server.server
begins an import cycle.

Check notice on line 787 in litellm/proxy/_experimental/mcp_server/db.py

See this annotation in the file changed.

Code scanning / CodeQL

Empty except Note

'except' clause does nothing but pass and there is no explanatory comment.