build(deps): Bump litellm from 1.89.3 to 1.89.4

[dependabot]

Bumps litellm from 1.89.3 to 1.89.4.

Release notes

Sourced from litellm's releases.

v1.89.4

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.4

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.89.4/cosign.pub \
  ghcr.io/berriai/litellm:v1.89.4

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• chore(release): backport #31029 to stable/1.89.x and cut 1.89.4 by @​yuneng-berri in BerriAI/litellm#31168
• chore(ui): rebuild dashboard artifacts for stable/1.89.x by @​yuneng-berri in BerriAI/litellm#31170
• chore(release): backport #30787, #30788, #31035, #31036, #31122, #31133 to stable/1.89.x (litellm-enterprise 0.1.42.post2) by @​yuneng-berri in BerriAI/litellm#31259

Full Changelog: BerriAI/litellm@v1.89.3...v1.89.4

Commits

• 7f77969 Merge pull request #31259 from BerriAI/litellm_backport_1_89_x_bp-189x-0624
• 15f6872 chore: refresh uv.lock for litellm-enterprise 0.1.42.post2
• abd7192 chore(release): bump litellm-enterprise 0.1.42 -> 0.1.42.post2 for stable/1.89.x
• b02bb79 chore(deps): bump remaining osv-flagged deps to clear CVEs on stable/1.89.x
• f911b0c fix(deps): bump osv-flagged dependencies to clear known CVEs (#31122)
• 5339c2d fix(vertex/files): stream OpenAI->Vertex batch JSONL uploads (#31036)
• 096eee0 fix(docker): bump wolfi-base digest to patch openssl CVE-2026-34182 (#31133)
• 79cc47d fix(passthrough,streaming): recover cost on interrupted and agentic Anthropic...
• a62034d fix(proxy): record partial spend on the failure row for interrupted streams (...
• 1b45b02 fix(passthrough): recover output tokens for interrupted anthropic streams (#3...
• Additional commits viewable in compare view