v1.6.0 — security + claudebox v1.13.1 + reasoning/vision models + Piper TTS Security - litellm v1.83.5-nightly -> v1.83.14-stable.patch.2: fixes CVE-2026-42208 (pre-auth SQL injection in API key verification, CVSS 9.3). Stable channel, cosign-signed. Post-supply-chain-incident v1.83.x line. - redis 7.4.8-alpine -> 7.4.9-alpine: RCE/UAF CVEs disclosed 2026-05-05. Applied to both `redis` and `stealthy-auto-browse-redis`. Claudebox - psyb0t/claudebox v1.9.0-minimal -> v1.13.1-minimal (11 versions, mostly cron+telegram fixes irrelevant to aigate's CLAUDE_MODE_API=1 usage). - v1.11.0 surfaces `opusplan` in /openai/v1/models — added claudebox-opusplan provider entry. claudebox-zai unchanged. New local CUDA LLMs (4) - local-ollama-cuda-phi4-reasoning-plus — Phi-4 Reasoning Plus 14B+RL (~11GB) - local-ollama-cuda-deepseek-r1-14b — DeepSeek-R1-Distill-Qwen-14B (~9GB) - local-ollama-cuda-qwen3-30b-a3b — Qwen3 30B MoE / 3B active (~17GB) - local-ollama-cuda-qwen2.5vl-7b — Qwen2.5-VL 7B vision (~5GB) - All four added to ollama-pull CUDA section for auto-download. New local CPU Piper TTS models (17, 16 languages) - Fills the multilingual TTS gap (Kokoro = English/Chinese-leaning, Qwen3-TTS needs CUDA and covers 10 langs). - Multi-speaker (5): en_US-libritts-high (904), en_GB-vctk-medium (109), fr_FR-mls-medium, nl_NL-mls-medium, sv_SE-nst-medium — speaker via voice:"<id>" - Single-speaker (12): de_DE-thorsten-high, es_ES-davefx-medium, it_IT-paola-medium, pl_PL-darkman-medium, pt_BR-faber-medium, ro_RO-mihai-medium, ru_RU-irina-medium, tr_TR-fahrettin-medium, uk_UA-ukrainian_tts-medium, vi_VN-vais1000-medium, zh_CN-huayan-medium, ar_JO-kareem-medium - Served by existing speaches container (lazy-downloaded), no infra changes. Fallback chains (5 chains in litellm/config/fallbacks.json) - phi4-reasoning-plus -> deepseek-r1-14b -> deepseek-r1-8b -> qwen3-30b-a3b -> qwen3-8b -> hf-deepseek-r1 -> cerebras-qwen3-235b -> cpu-qwen3-4b - deepseek-r1-14b -> phi4-reasoning-plus -> deepseek-r1-8b -> qwen3-30b-a3b -> qwen3-8b -> hf-deepseek-r1 -> cerebras-qwen3-235b -> cpu-qwen3-4b - deepseek-r1-8b (updated) -> deepseek-r1-14b -> phi4-reasoning-plus -> qwen3-8b -> llama3.1-8b -> hf-deepseek-r1 -> cpu-qwen3-4b - qwen3-30b-a3b -> qwen3-abliterated-16b -> qwen3-8b -> llama3.1-8b -> cerebras-qwen3-235b -> or-qwen3-80b -> mistral-large -> cpu-qwen3-4b - qwen2.5vl-7b -> gemma4-e4b -> hf-qwen3-vl-8b -> hf-qwen-vl-72b -> groq-llama-4-scout -> hf-llama-4-scout -> openai-gpt-4o Note: the actual git commit landed on main as "f" (04522c9) before this tag was cut; full release notes live in this annotated tag. No env var changes. No breaking changes.