build(deps): bump the python-dependencies group with 2 updates

[dependabot]

Updates the requirements on litellm and typer to permit the latest version.
Updates litellm from 1.83.14 to 1.87.1

Release notes

Sourced from litellm's releases.

v1.87.1

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.87.1

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.87.1/cosign.pub \
  ghcr.io/berriai/litellm:v1.87.1

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• chore(release): backport five staged fixes into stable/1.87.x and cut 1.87.1 by @​mateo-berri in BerriAI/litellm#29631
• chore(release): backport #29612 (session-token budget-ceiling exemption) into stable/1.87.x and cut 1.87.2 by @​mateo-berri in BerriAI/litellm#29636
• chore: restore stable/1.87.x to 1.87.1 (revert premature 1.87.2 bump) by @​mateo-berri in BerriAI/litellm#29645

Full Changelog: BerriAI/litellm@v1.87.0...v1.87.1

v1.86.4

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

... (truncated)

Commits

• See full diff in compare view

Updates typer to 0.26.7

Release notes

Sourced from typer's releases.

0.26.7

Fixes

• 🐛 Respect wait=False when launching URLs with xdg-open. PR #1820 by @​patrick91.

Changelog

Sourced from typer's changelog.

0.26.7 (2026-06-03)

Fixes

• 🐛 Respect wait=False when launching URLs with xdg-open. PR #1820 by @​patrick91.

0.26.6 (2026-06-02)

Fixes

• 🐛 Ensure that the default of a list argument is used correctly. PR #1821 by @​svlandeg.

Internal

• 👷 Speed up the CI by shuffling the test matrix. PR #1815 by @​svlandeg.

0.26.5 (2026-06-01)

Fixes

• 🐛 Ensure that hidden commands are not shown when Rich markup is disabled. PR #1812 by @​svlandeg.

Internal

• 🔥 Remove old stub packages. PR #1810 by @​tiangolo.

0.26.4 (2026-05-30)

Features

• 📝 Update AI Library Skill to avoid verbose code for CLI Options. PR #1808 by @​tiangolo.

Internal

• 👷 Add CI to create draft release after merging a release PR. PR #1807 by @​tiangolo.
• 👷 Update labeler to accept label release. PR #1806 by @​tiangolo.
• 👷 Update GitHub Action permissions for prepare-release. PR #1804 by @​tiangolo.
• 👷 Add GitHub Actions prepare release workflow. PR #1802 by @​tiangolo.
• 👷 Update publish action, do not use uv cache. PR #1803 by @​tiangolo.
• ⬆ Bump the python-packages group across 1 directory with 5 updates. PR #1793 by @​dependabot[bot].

0.26.3 (2026-05-28)

Refactors

• ♻️ Unify the testing functionality. PR #1792 by @​svlandeg.

Internal

• 👷 Update version of latest-changes GitHub action. PR #1798 by @​tiangolo.

... (truncated)

Commits

• 4e10334 🔖 Release version 0.26.7 (#1823)
• 08a8a03 📝 Update release notes
• 8e75bc3 🐛 Respect wait=False when launching URLs with xdg-open (#1820)
• d2e002a 🔖 Release version 0.26.6 (#1822)
• 2fe5d0c 📝 Update release notes
• 06fce7d 🐛 Ensure that the default of a list argument is used correctly (#1821)
• 7f888b2 📝 Update release notes
• 2e9bf9e 👷 Speed up the CI by shuffling the test matrix (#1815)
• 1888fa2 🔖 Release version 0.26.5 (#1813)
• a493a98 📝 Update release notes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
notewise	Ready	Preview, Comment	Jun 5, 2026 10:44am