build(deps): bump litellm from 1.83.0 to 1.84.0 in /V0

[dependabot]

Bumps litellm from 1.83.0 to 1.84.0.

Release notes

Sourced from litellm's releases.

v1.84.0

⚠️ Heads up — this release contains breaking changes. Read the full release notes here: v1.84.0 release notes

---

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.84.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.84.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.84.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• merge main by @​Sameerlite in BerriAI/litellm#25521
• merge litellm_internal_staging by @​Sameerlite in BerriAI/litellm#25949
• merge main by @​Sameerlite in BerriAI/litellm#26304
• merge main by @​Sameerlite in BerriAI/litellm#26379
• merge main by @​Sameerlite in BerriAI/litellm#26437
• fix(redis): cache GCP IAM token to prevent async event loop blocking by @​harish-berri in BerriAI/litellm#26441
• litellm oss branch by @​krrish-berri-2 in BerriAI/litellm#26386
• fix noma v2 deepcopy crashing in build scan payload - new PR by @​omriShukrun08 in BerriAI/litellm#26605
• fix(ui): use stored-credentials endpoint for tools fetch on MCP edit page by @​ryan-crabbe-berri in BerriAI/litellm#26002
• feat(proxy): add --timeout_worker_healthcheck flag for uvicorn worker triage by @​ryan-crabbe-berri in BerriAI/litellm#26622

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Note

Medium Risk
LiteLLM is on the critical LLM path and v1.84.0 advertises breaking changes, though this PR only updates dependency resolution with no code edits.

Overview
Raises the litellm test/dev dependency cap from <=1.83.0 to <=1.84.0 in V0/pyproject.toml, keeping the same exclusions for compromised PyPI releases 1.82.7 and 1.82.8. V0/uv.lock is refreshed so the resolved package moves from 1.83.0 to 1.84.0.

No application code changes—only version pins and lockfile artifacts. Note that upstream v1.84.0 release notes flag breaking changes; worth running LiteLLM-related tests after merge since the server routes LLM calls through litellm.

^{Reviewed by Cursor Bugbot for commit b00a968. Bugbot is set up for automated code reviews on this repo. Configure here.}