build(deps): update litellm requirement from >=1.89.0 to >=1.95.0

[dependabot]

Updates the requirements on litellm to permit the latest version.

Release notes

Sourced from litellm's releases.

v1.95.0

Verify Docker Image Signature

All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.

Verify using the pinned commit hash (recommended):

A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
  ghcr.io/berriai/litellm:v1.95.0

Verify using the release tag (convenience):

Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:

cosign verify \
  --key https://raw.githubusercontent.com/BerriAI/litellm/v1.95.0/cosign.pub \
  ghcr.io/berriai/litellm:v1.95.0

Expected output:

The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key

---

What's Changed

• feat(spend): track prompt compression saved tokens in daily spend aggregates by @​tin-berri in BerriAI/litellm#33810
• test(e2e): assert the long budget window keeps blocking after the short window resets by @​ryan-crabbe-berri in BerriAI/litellm#33832
• feat(messages): route native Anthropic /messages through Rust behind LITELLM_RUST env var by @​devin-ai-integration[bot] in BerriAI/litellm#33848
• test(e2e): cover credential-backed /v1/messages request by @​devin-ai-integration[bot] in BerriAI/litellm#33863
• feat(rust): expose Anthropic Messages route (POST /v1/messages) on the axum gateway by @​devin-ai-integration[bot] in BerriAI/litellm#33880
• feat(rust): 1:1 port of OpenAI Responses API WebSockets to litellm-rust by @​devin-ai-integration[bot] in BerriAI/litellm#33849
• fix(proxy): treat malformed cost-map token limits as absent on /v1/models by @​yuneng-berri in BerriAI/litellm#33903
• feat(rust): port BaseAWSLLM auth (credential resolution + SigV4) to litellm-core as a base provider by @​devin-ai-integration[bot] in BerriAI/litellm#33888
• feat(complexity-router): add return_raw_model_name toggle for response model field by @​devin-ai-integration[bot] in BerriAI/litellm#33875
• feat(mcp): always-on aggregate gateway DCR discovery front door by @​tin-berri in BerriAI/litellm#33174
• fix(langfuse): send v4 ingestion header for otel callback by @​yucheng-berri in BerriAI/litellm#33907
• feat(ui): add configuration tabs to the Cost Optimization page by @​devin-ai-integration[bot] in BerriAI/litellm#33899
• test(e2e): guard destructive spend-log truncate behind an explicit opt-in by @​yassin-berriai in BerriAI/litellm#33751
• chore(rust): migrate the litellm-rust workspace (core, ai-gateway, python-bridge) from Rust edition 2021 to edition 2024 by @​vineetpuranik in BerriAI/litellm#33940
• fix(fireworks_ai): restore Content-Type application/json header (fixes 415) by @​devin-ai-integration[bot] in BerriAI/litellm#33929

... (truncated)

Commits

• 72a4a55 Merge pull request #35552 from BerriAI/litellm_/backport-35523-rc-1-95-0-f65d9e
• 7d0963a chore: update Next.js build artifacts (2026-08-02 00:27 UTC, node v20.20.2)
• 69f5fe3 Merge pull request #35523 from BerriAI/litellm_ui_login_no_mcp_landing
• 6753639 Merge pull request #35414 from BerriAI/litellm_sync_rc_1_95_0
• 27c6a4c chore(release): sync rc/1.95.0 with the v1.95.0-rc.1 main SHA
• 9439174 Merge pull request #35299 from BerriAI/litellm_backport_35271_rc_1_95_0
• 8b92b36 revert(proxy)!: stop enforcing user budget on team keys (#35271)
• cad32fd Merge pull request #35049 from BerriAI/litellm_hotfix_35047_mcp_e2e_poll
• 82fa669 test(e2e): poll MCP tools across multi-worker lag (#35047)
• 2cd62cf Merge pull request #35020 from BerriAI/litellm_hotfix_e2e_model_servable_timeout
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Approved by Dependabot Autopilot.

[github-actions]

🤖 Approved by Dependabot Autopilot.

[github-actions]

🤖 Dependabot Autopilot: closing — a CI/deployment check failed. Dependabot will regenerate this and it will be re-tried automatically.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.