deps(deps): update litellm requirement from <1.89.0,>=1.77.1 to >=1.77.1,<1.90.0

[dependabot]

Updates the requirements on litellm to permit the latest version.

Release notes

Sourced from litellm's releases.

v1.89.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.89.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• test(responses): bump deprecated gemini-3-pro-preview to gemini-3.1-pro-preview by @​mateo-berri in BerriAI/litellm#29433
• fix: map mistral/ministral-8b-latest in model price map by @​mateo-berri in BerriAI/litellm#29453
• fix(datadog): split oversized batches on 413 instead of re-queueing forever by @​yassin-berriai in BerriAI/litellm#29444
• feat(otel): allowlist team_metadata sub-keys promoted to baggage by @​yassin-berriai in BerriAI/litellm#29442
• fix: stop use_chat_completions_api flag from leaking into provider request body by @​mateo-berri in BerriAI/litellm#29447
• fix(anthropic, fireworks): inline legacy $ref defs in tool schemas by @​milan-berri in BerriAI/litellm#28646
• fix(proxy): omit OpenAI [DONE] on google-genai streamGenerateContent by @​Sameerlite in BerriAI/litellm#29426
• ci(release): create stable/X.Y.x line branch on X.Y.0 tags by @​yuneng-berri in BerriAI/litellm#29457
• fix(vector-stores): support engines URL for Vertex AI Search by @​ryan-crabbe-berri in BerriAI/litellm#27885
• fix(ui): render caller-supplied filter options in caller order by @​ryan-crabbe-berri in BerriAI/litellm#29462
• fix(batches): skip unnecessary batch input file reads by @​Sameerlite in BerriAI/litellm#29114
• docs(agents): clarify when to create new test files by @​Sameerlite in BerriAI/litellm#29472
• Litellm OSS Staging by @​Sameerlite in BerriAI/litellm#29161
• fix(mcp): clear allowed_tools and tool overrides on MCP server edit by @​Sameerlite in BerriAI/litellm#29411
• Litellm OSS Staging 010626 by @​Sameerlite in BerriAI/litellm#29422

... (truncated)

Commits

• 2978a92 Add Claude Fable 5 across Anthropic, Bedrock, Vertex AI, and Azure AI (#30064...
• 8f41fdb Merge pull request #29862 from BerriAI/litellm_internal_staging
• 68d6721 fix: 400 on Anthropic context overflow; seed identity on failed auth (#29848)
• fc7538f Merge pull request #29861 from BerriAI/litellm_internal_staging
• f1667b9 chore(deps): bump deps (#29860)
• 33c363d Extend the record/replay proxy to chat, embeddings, moderations, rerank, and ...
• 38b28b9 fix(terraform/gcp): abandon SQL user on destroy (#29855)
• 43c1037 fix(terraform/gcp): prompt for image_registry in DeployStack one-click (#29852)
• 1975b96 chore: update Next.js build artifacts (2026-06-06 20:08 UTC, node v20.20.2) (...
• 1cff02f refactor: convert AWS and GCP Terraform stacks into reusable modules … (#28103)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[nikolay-e]

Superseded by the dependabot ecosystem fix: .github/dependabot.yml migrated the Python pip ecosystem to uv. This project is uv-managed (uv.lock + the uv-lock pre-commit gate), and the pip ecosystem only edits pyproject.toml without updating uv.lock — so this PR was permanently blocked on the uv-lock check. The uv ecosystem updates pyproject + uv.lock atomically, so litellm will be re-proposed correctly on the next dependabot run if a newer version is available.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud