deps(deps): bump the dependency-updates group across 1 directory with 3 updates

[dependabot]

Bumps the dependency-updates group with 3 updates in the / directory: litellm, google-auth and hypothesis.

Updates litellm from 1.91.1 to 1.92.0

Release notes

Sourced from litellm's releases.

v1.92.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.92.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.92.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.92.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(proxy): gate team allowed_passthrough_routes to proxy admins by @​ryan-crabbe-berri in BerriAI/litellm#28097
• fix(tests): stabilize image-edit VCR cassettes to stop live gpt-image-1 spend by @​mateo-berri in BerriAI/litellm#28110
• fix(bedrock/cohere): send embedding_types as JSON array, not string by @​ishaan-berri in BerriAI/litellm#28172
• fix(tests): migrate realtime + rerank tests off shut-down upstream models by @​yuneng-berri in BerriAI/litellm#28191
• fix(caching): replay openai/responses bridge cache hits as chat streams by @​Sameerlite in BerriAI/litellm#28158
• Litellm oss staging by @​Sameerlite in BerriAI/litellm#28161
• feat(prometheus): add user_email and user_alias to user budget metrics by @​Sameerlite in BerriAI/litellm#28155
• test(callbacks): harden flaky proxy callback-leak detector by @​yuneng-berri in BerriAI/litellm#28195
• fix(bedrock): sanitize batch metadata to prevent Pydantic ValidationError by @​mateo-berri in BerriAI/litellm#28202
• fix(deepseek): use native /anthropic/v1/messages endpoint and sanitize tools by @​mateo-berri in BerriAI/litellm#28200
• feat(ui): add Interactions API endpoint to playground with SSE streaming by @​Sameerlite in BerriAI/litellm#28156
• fix(proxy): decode bytes and pass-through SSE for Google-native streamGenerateContent (#27444) by @​Sameerlite in BerriAI/litellm#28213
• refactor(bedrock/sagemaker): switch to lazy loading for response stre… by @​harish-berri in BerriAI/litellm#28189
• [Refactor] UI - Spend Logs: consolidate filter state and extract components by @​ryan-crabbe-berri in BerriAI/litellm#25847
• fix(tests): replace shut-down gpt-4o-audio-preview with gpt-audio-1.5 by @​yuneng-berri in BerriAI/litellm#28281

... (truncated)

Commits

• b3086cc chore(release): backport 11 staging PRs onto patch-1.92.0rc2 for the 1.92.0 s...
• 78c5618 Merge pull request #32554 from BerriAI/litellm_ui_rebuild_192rc1
• 0f4f09f chore: update Next.js build artifacts (2026-07-08 23:23 UTC, node v20.20.2)
• d2b4f49 Merge pull request #32553 from BerriAI/litellm_backport_patch_192rc1
• 27b5cfd fix(otel): restore error.* span attributes on v2 error spans (LIT-4179) (#32524)
• c5fa3a8 Merge pull request #32405 from BerriAI/litellm_kraken-remove-envref-gates
• 8c8e4d0 fix(ui/mcp): do not reset in-flight OAuth resume when create modal mounts clo...
• 2d35ea5 feat(otel): stamp gen_ai.response.time_to_first_chunk on streaming LLM spans ...
• b5dee35 Merge pull request #32277 from BerriAI/litellm_/elated-noyce-6fc150
• e1ec215 Merge pull request #32256 from BerriAI/litellm_bedrock_db_env_expansion
• Additional commits viewable in compare view

Updates google-auth from 2.55.2 to 2.56.0

Release notes

Sourced from google-auth's releases.

google-auth: v2.56.0

2.56.0 (2026-07-13)

Features

• auth: Implement python mtls helpers (#17495) (e7baed1)

Bug Fixes

• google-auth: add aiohttp bound for Python 3.14 (#17654) (b2ec761)
• google-auth: add bounds for urllib3 and packaging dependencies (#17647) (e9c6265)
• google-auth: add cryptography bound for Python 3.14 (#17649) (e9ca4c4)
• google-auth: add gRPC extra and clean up obsolete TODOs (#17644) (6da41e8), closes #1735 #1736 #1739
• google-auth: raise rsa extra lower bound to 4.0 (#17652) (4087828)

Commits

• 7c18c24 chore: release main (#17646)
• 8feb1b8 tests(bigquery): implement robust wait loop for socket leak tests (#17688)
• e5f7fef fix: bump mistune from 3.2.1 to 3.3.0 in /packages/bigframes (#17694)
• bd5d1a4 docs: add project ID to pandas-gbq run sample (#17692)
• 635da34 fix: bump soupsieve from 2.7 to 2.8.4 in /packages/bigframes (#17695)
• 4253fab feat(bigframes): support offset-based column access via iloc (#17367)
• a5a717d feat(storage): add option to disable checksums and improve robustness of full...
• fc423c8 docs: make landing page quickstart runnable (#17687)
• cae94f9 feat(bigframes): Support groupby.agg/transform with udf transpiler (#17613)
• 91f93bc fix(bigframes): Fix sqlglot backend regressions (#17655)
• Additional commits viewable in compare view

Updates hypothesis from 6.156.4 to 6.156.6

Commits

• 276c391 Bump hypothesis version to 6.156.6 and update changelog
• c6e2305 Merge pull request #4791 from dylan-bakr/strip-auth-on-redirect
• 988999a use add_unredirected_header instead
• e8458dd Bump hypothesis version to 6.156.5 and update changelog
• db2968a Merge pull request #4794 from Liam-DeVoe/publish-x86-wheels
• a4d3a6d build 32bit wheels for windows and linux
• 8343697 remove unused # type: ignore comment
• ed741f0 create RELEASE.rst
• eeb0fe9 claude: strip Authorization header on cross-host redirect
• 227074f claude: create test
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.