Merged on November 14th, the breaking change returns 403 without a configured admin key and leaves several operational routes at a weaker optional level.
By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)
· Published
SGLang merged a breaking authentication change on November 14th that puts weight updates, LoRA and a long list of runtime controls behind a dedicated administrator key. The change was submitted by contributor Shuwen Wang, who uses the GitHub account alphabetc1, as pull request #49896 and landed in commit 7b5fb39.
Routes classified as 'ADMIN_FORCE' return HTTP 403 when the server starts without an admin key. When a key is configured, they accept that admin key rather than an ordinary inference API key.…
source & further reading
runtimewire.com — original article
LiteLLM fixes ignored web-search cap that turned a limit of one into three searches and a 500
llama.cpp patch speeds up one RTX 5090 matrix multiply 4.5x
Browser Use 1.0.5 sends unredacted screenshots to its default run judge