What changed
LiteLLM 1.98 added proactive model-retirement alerts and a deprecations endpoint, stripped callback credentials from request metadata, scoped file pagination to the caller, introduced deployment-specific failure and cooldown policies, and published signed-container verification instructions.
Why it matters
The release addresses lifecycle visibility, credential leakage, tenant isolation, fallback behavior, and supply-chain verification at a shared model-gateway boundary.
What to do
Verify the container signature with an immutably pinned key revision, canary the upgrade, and test file isolation, metadata redaction, deprecation alerts, fallback boundaries, and rollback.
Caveat
This large release has no independent audit and needs broad regression testing. It is a separate 23 August lifecycle event, not the March supply-chain incident.