diff --git a/CloudronManifest.json b/CloudronManifest.json
index b4f5c8f..c96b5be 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -2,10 +2,10 @@
   "id": "ai.coop.litellm",
   "title": "LiteLLM Gateway",
   "author": "inference.coop",
-  "description": "LiteLLM AI Gateway — OpenAI-compatible proxy with per-user API keys, usage tracking, rate limiting, and model routing. Packaged for Cloudron with SSO/OIDC and PostgreSQL.",
+  "description": "LiteLLM AI Gateway \u2014 OpenAI-compatible proxy with per-user API keys, usage tracking, rate limiting, and model routing. Packaged for Cloudron with SSO/OIDC and PostgreSQL.",
   "tagline": "AI gateway for cooperative inference",
   "version": "1.0.0",
-  "upstreamVersion": "1.84.0",
+  "upstreamVersion": "1.103.2",
   "healthCheckPath": "/health/readiness",
   "httpPort": 4000,
   "memoryLimit": 2147483648,
@@ -18,7 +18,12 @@
     "redis": {},
     "localstorage": {}
   },
-  "tags": ["ai", "gateway", "proxy", "api"],
+  "tags": [
+    "ai",
+    "gateway",
+    "proxy",
+    "api"
+  ],
   "mediaLinks": [],
   "changelog": "Initial package for inference.coop"
 }
\ No newline at end of file
diff --git a/Dockerfile b/Dockerfile
index 99fa8ef..324bcbd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/berriai/litellm:v1.84.0
+FROM ghcr.io/berriai/litellm:v1.103.2
 
 # v1.84.0 is the fix line for CVE-2026-35029 (auth bypass on
 # /config/update, fixed 1.83.0) and CVE-2026-59822 (MCP session auth