This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+7 more
Affected surfaces
ReleasePort's take
Light signalRelease v9.0.0 fixes a session type path mismatch and extends the pending route TTL to one hour, while adding warnings for silent env var overrides.
Why it matters: Extending the pending route TTL from 5 minutes to 1 hour reduces premature route expirations; logging warnings prevents unintended routing behavior when LLM_ROUTER_ENFORCE silently overrides routing.yaml.
Summary
AI summaryFixed session type path mismatch, extended pending route TTL to 1 hour, and added warnings for silent env var overrides.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fixes session type path mismatch between auto-route.py and enforce-route.py. Fixes session type path mismatch between auto-route.py and enforce-route.py. Source: llm_adapter@2026-05-23 Confidence: high |
— |
| Bugfix | Medium |
Extends pending route TTL from 5 minutes to 1 hour. Extends pending route TTL from 5 minutes to 1 hour. Source: llm_adapter@2026-05-23 Confidence: low |
— |
| Bugfix | Medium |
Logs warning when `LLM_ROUTER_ENFORCE` env var overrides routing.yaml silently. Logs warning when `LLM_ROUTER_ENFORCE` env var overrides routing.yaml silently. Source: llm_adapter@2026-05-23 Confidence: low |
— |
Full changelog
What's New
Fixed
- Session type path mismatch —
auto-route.pyresetsession_type_{id}.jsonbutenforce-route.pyreadsession_{id}.json, so once a session was marked "coding", enforcement stayed soft permanently. Now both hooks use the same path. - Pending route TTL too short — extended from 5 minutes to 1 hour. Routing state now survives context compaction delays without expiring between prompts.
- Silent env var override —
LLM_ROUTER_ENFORCEset in.zshrc/.bashrcsilently overroderouting.yamlwith no warning.enforce-route.pynow logs a conflict warning toenforcement.log, andset-enforcewarns users when a shell env var will override the written config.
Upgrade
pip install --upgrade claude-code-llm-router
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About ypollak2/llm-router
Subscription-aware LLM router for Claude Code. Routes tasks to 20+ providers (OpenAI, Gemini, Groq, Ollama, Codex) based on complexity classification, Claude subscription pressure, and cost. Free tasks stay on Claude subscription; expensive tasks fall back to the cheapest capable model. Includes 30 MCP tools, 6 auto-routing hooks, semantic dedup cache, prompt caching, daily spend cap, and a live web dashboard.
Related context
Related tools
Beta — feedback welcome: [email protected]