chore(deps): bump litellm from 1.96.2 to 1.98.0

[dependabot]

Bumps litellm from 1.96.2 to 1.98.0.

Release notes

Sourced from litellm's releases.

v1.98.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.98.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.98.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.98.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(bedrock): drop toolSpec.strict for Claude Sonnet 5 on Converse by @​kr0k in BerriAI/litellm#33196
• fix(batches): attribute Vertex passthrough batch cost to key/team/tags by @​yucheng-berri in BerriAI/litellm#34456
• docs: rewrite the CLAUDE.md comment rule with explicit exceptions by @​devin-ai-integration[bot] in BerriAI/litellm#36301
• fix(proxy): scope file list pagination cursors to the caller by @​devin-ai-integration[bot] in BerriAI/litellm#36093
• fix(proxy): skip prisma-dependent hooks when no database is attached by @​mateo-berri in BerriAI/litellm#36273
• fix(proxy): report has_more false on caller-scoped file list pages by @​mateo-berri in BerriAI/litellm#36326
• fix(proxy): restore management_v1 query-param validation under fastapi>=0.140.7 by @​HuanQian571 in BerriAI/litellm#35773
• fix(proxy): stop /{provider}/v1/files from capturing /openai_passthrough by @​devin-ai-integration[bot] in BerriAI/litellm#36092
• chore(typing): remove 914 basedpyright Any errors across 16 hotspot files by @​mateo-berri in BerriAI/litellm#36386
• fix(router): keep batch fallbacks inside the model group that owns the file by @​mateo-berri in BerriAI/litellm#36181
• feat(ptu): configure provisioned-throughput flat cost on a model deployment by @​yucheng-berri in BerriAI/litellm#35341
• docs: clarify the CLAUDE.md comment exceptions are any-of by @​devin-ai-integration[bot] in BerriAI/litellm#36421
• docs: replace the Changes PR template section with Caveats by @​devin-ai-integration[bot] in BerriAI/litellm#36423
• fix(bedrock): enable native structured output for GLM 5 and DeepSeek V3.2 by @​alexshtf in BerriAI/litellm#35669
• feat(ptu): daily rollup writes per-model PTU flat cost by active hour by @​yucheng-berri in BerriAI/litellm#35343

... (truncated)

Commits

• d8f71d7 fix(ui): keep completion-mode models in the playground chat dropdown (backpor...
• bc6e7df Merge pull request #37042 from BerriAI/litellm_internal_staging
• 973329e Merge pull request #37069 from BerriAI/litellm_/frosty-goldwasser-93a2a1
• de2b220 test(e2e/ui): assert the log drawer chevrons by their lucide classes
• ae8afec Merge pull request #37066 from BerriAI/litellm_/release-ui-build-1e15d9
• b3077c9 chore: update Next.js build artifacts (2026-08-16 00:22 UTC, node v24.19.0)
• 992a812 Merge pull request #37010 from BerriAI/litellm_shadcn_next_0814
• 91aee78 Merge pull request #37065 from BerriAI/litellm_/nice-wilson-9fbed6
• dddee7d Merge pull request #37063 from BerriAI/litellm_pr_template_proof_format
• 1968562 Merge pull request #37059 from BerriAI/litellm_/circleci-pipeline-triage-9b92e5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
pip/boto3	1.43.83	🟢 7.4	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 0 Found 0/28 approved changesets -- score normalized to 0 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Pinned-Dependencies 🟢 10 all dependencies are pinned Binary-Artifacts 🟢 10 no binaries found in the repo Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 6 branch protection is not maximal on development and all release branches SAST 🟢 10 SAST tool is run on all commits
pip/botocore	1.43.83	🟢 8	Details Check Score Reason Code-Review ⚠️ 0 Found 1/29 approved changesets -- score normalized to 0 Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Fuzzing 🟢 10 project is fuzzed Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Branch-Protection 🟢 6 branch protection is not maximal on development and all release branches Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 SAST 🟢 10 SAST tool is run on all commits
pip/litellm	1.98.0	Unknown	Unknown
pip/s3transfer	0.19.2	🟢 7.7	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 3 Found 5/15 approved changesets -- score normalized to 3 Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 6 branch protection is not maximal on development and all release branches SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• uv.lock