chore(deps): Update litellm requirement from >=1.86.2 to >=1.90.0

[dependabot]

Updates the requirements on litellm to permit the latest version.

Release notes

Sourced from litellm's releases.

v1.90.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.90.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.90.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.90.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• fix(responses-bridge): map system-only chat request to system input item by @​milan-berri in BerriAI/litellm#29817
• feat(bedrock): forward strict and additionalProperties to Converse toolSpec by @​mateo-berri in BerriAI/litellm#29814
• fix(mcp): highlight MCP cards red when the logged-in user is missing per-user env vars by @​mateo-berri in BerriAI/litellm#29856
• feat(ui): add budget duration to edit team member form by @​ryan-crabbe-berri in BerriAI/litellm#29717
• fix(ui): make workflow runs page fill full width by @​yuneng-berri in BerriAI/litellm#29868
• feat: standardize rate limit errors with category, rate_limit_type, model, and llm_provider fields by @​mateo-berri in BerriAI/litellm#27687
• fix(ui): default guardrails page to the Guardrails tab by @​yuneng-berri in BerriAI/litellm#29872
• docs(readme): add Deploy on AWS/GCP Terraform section and fix deploy button rendering by @​mateo-berri in BerriAI/litellm#29879
• refactor(bedrock): build Converse toolSpec via a BedrockToolSpec dict subclass by @​mateo-berri in BerriAI/litellm#29869
• feat(litellm): add models and repository layers by @​yassin-berriai in BerriAI/litellm#29686
• feat(ui): include internal routes in the dashboard's generated OpenAPI types by @​ryan-crabbe-berri in BerriAI/litellm#29885
• feat(proxy): publish /v2/model/info in Swagger OpenAPI spec by @​Sameerlite in BerriAI/litellm#29900
• refactor(ui): single source of truth for migrated-page routing by @​ryan-crabbe-berri in BerriAI/litellm#29949
• fix(ui/model-hub): render provider icons on the public model hub by @​yuneng-berri in BerriAI/litellm#29958
• fix(ui): keep create guardrail modal open on outside click by @​yuneng-berri in BerriAI/litellm#29871

... (truncated)

Commits

• 6e8282d fix(mcp): challenge delegate-auth OAuth servers with upstream resource_metada...
• 0b9dce0 chore: update Next.js build artifacts (2026-06-27 01:58 UTC, node v20.20.2)
• 95a0c30 fix(ui): render logos under a custom server_root_path (#31156)
• dcf1b44 Merge pull request #30907 from BerriAI/litellm_internal_staging
• df5619f chore: update Next.js build artifacts (2026-06-21 00:50 UTC, node v20.20.2) (...
• 8125ddd fix(ui): source api-keys identity from useAuthorized to stop "User ID is not ...
• 53593f6 feat(sandbox): e2b code execution primitive (#30898)
• b16cfd7 test: point router/completion/triton tests at the local fake OpenAI endpoint ...
• c7efa77 fix(watsonx): wrap string embedding input in array for WatsonX API (#30897)
• 46d2861 chore(ci): bump deps (#30899)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #79.