diff --git a/kubernetes/apps/ai/litellm/app/litellmproxy.yaml b/kubernetes/apps/ai/litellm/app/litellmproxy.yaml
index baf1d3df2..c496a562b 100644
--- a/kubernetes/apps/ai/litellm/app/litellmproxy.yaml
+++ b/kubernetes/apps/ai/litellm/app/litellmproxy.yaml
@@ -32,7 +32,7 @@ spec:
     network.home.arpa/from-envoy-internal: allow
     network.home.arpa/to-envoy-external: allow
   # renovate: datasource=docker depName=ghcr.io/berriai/litellm
-  image: ghcr.io/berriai/litellm:v1.108.3@sha256:f14d0a035d84d1a8bc98538faf5999e456641fd4cfa191822fd4be1934c1f4f6
+  image: ghcr.io/berriai/litellm:v1.109.1@sha256:11175975a3093e05e92faee2fe2fe3412a3ae2fcaa849eb0fe25d5f0d8bcb2e9
   replicas: 1
   generalSettings:
     cancel_on_disconnect: true
diff --git a/kubernetes/apps/ai/truenas-mcp/app/mcpserver.yaml b/kubernetes/apps/ai/truenas-mcp/app/mcpserver.yaml
index 3f6242a33..a34a92d36 100644
--- a/kubernetes/apps/ai/truenas-mcp/app/mcpserver.yaml
+++ b/kubernetes/apps/ai/truenas-mcp/app/mcpserver.yaml
@@ -26,7 +26,7 @@ spec:
       readOnlyRootFilesystem: true
     # Reuse the proxy image's installed MCP SDK; no runtime package downloads.
     # renovate: datasource=docker depName=ghcr.io/berriai/litellm
-    image: ghcr.io/berriai/litellm:v1.108.3@sha256:f14d0a035d84d1a8bc98538faf5999e456641fd4cfa191822fd4be1934c1f4f6
+    image: ghcr.io/berriai/litellm:v1.109.1@sha256:11175975a3093e05e92faee2fe2fe3412a3ae2fcaa849eb0fe25d5f0d8bcb2e9
     command: ["python", "/app/truenas/server.py"]
     port: 8080
     env: