elmah.io changelog

We have included three new models for Bugster: GPT 5.4, GPT 5.4 mini, and Gemini 3 Flash. That’s right, you can now run Bugster on Gemini as well. When picking Gemini or one of the OpenAI-hosted models, you still need to provide your own API key. Both GPT-5.4 and GPT-5.4 mini are available as elmah.io-hosted for Enterprise users as well.

While adding the new models, we have deprecated all GPT-4.1* models. If you have one of these models configured, please upgrade to a corresponding v5 model. We will remove all support for 4.1 models on Oct 14, 2026 (or before if everyone has moved).

If you are curious about Bugster, check out How to configure and use Bugster.

We released a new version of the elmah.io CLI. The new version contains a general restructure of commands, as well as a range of new commands like:

elmahio messages list-recent
elmahio messages list-frequent
elmahio logs list

And a few more. Be aware that you may now receive a deprecation warning if you are using root commands like elmahio log since many commands have been migrated to sub-commands. The deprecation warning will highlight which command to use instead, and the documentation is fully updated.

Thanks to jasonnissen for doing most of the work in this PR.

https://blog.elmah.io/mapping-database-views-in-ef-core-without-breaking-migrations/

Learn how to map database views in EF Core without breaking migrations. Follow this guide to handle manual SQL and read-only entities.

Bouncing accountant emails seem to be somewhat of a problem, so we have introduced a warning in the Send invoices to this email dialog, available on the Invoices tab. This should help receive invoices going forward.

There’s a new recommendation on the organization level, used as a warning when an active JavaScript API key has too many permissions. We recommend enabling only the messages_write permission on API keys used from JavaScript.

https://blog.elmah.io/how-net-handles-exceptions-internally-and-why-theyre-expensive/

Stop using exceptions for control flow in .NET. Learn why they’re slow, how the CLR handles them, and how OneOf can boost your app’s performance.

https://blog.elmah.io/designing-business-rules-that-dont-leak-into-controllers/

Stop leaking business logic into ASP.NET Core controllers. Learn to refactor fat controllers into clean, testable Service and Domain layers.

The API Usage column on the API Keys page now shows when an API key was last used. You can use this to revoke unused keys. We started collecting this information a couple of weeks ago, so Unknown can still mean that a key has been used before that.

We have replaced our cookie consent dialog with a more streamlined solution designed to improve transparency and reduce configuration overhead. We’ve clarified the descriptions for all active cookies and condensed the required user choices by eliminating non-essential categories. As part of our ongoing effort to minimize the data footprint on elmah.io, we have successfully reduced our requirements to necessary and preference cookies only, completely removing all tracking scripts. You will see the updated dialog upon your next visit to elmah.io or app.elmah.io.

We released a new version (5.4.75) of the Elmah.Io.AspNetCore.ExtensionsLogging package. The new version includes the following changes:

• Added new extension methods and attributes for enabling multipart body logging and disabling form logging entirely: EnableElmahIoMultipartBodyLogging and DisableElmahIoFormLogging. Thanks to pagefault for creating this PR.

The documentation has been updated to reflect the latest changes.

https://blog.elmah.io/when-not-to-use-the-repository-pattern-in-ef-core/

Stop using the repository pattern as a default. Learn when EF Core’s DbContext is enough and why abstractions can sometimes overengineer apps.

We have been using JWT for authentication in various elmah.io services for years. Having access to a good decoder is essential for debugging claims and signature issues, but we often found ourselves hesitant to paste sensitive tokens into random third-party websites.

That’s why we built our own Online JWT Decoder. It’s designed with a “security-first” approach, where all decoding happens locally in your browser. No data ever reaches our servers.

Available for free here: JWT Decoder.

Support for GPT-5.2 has been added to the Bugster configuration. Both OpenAI and elmah.io-hosted options for the new model are available. GPT-5.2 is running much faster than earlier 5.x models.

We have added a new recommendation to help keep your integration up to date. This feature uses package and version metadata automatically included with every log message sent to the elmah.io API via the Elmah.Io.* client libraries.

By analyzing this incoming information, elmah.io can now identify when a log message comes from an older version of a package. If we detect a client version with a known update, a recommendation is generated on the log.

We released a new version (4.2.2) of the Elmah.Io.JavaScript package. The new version includes the following changes:

• Fix: Handle non-JSON responses in source map consumer. Thanks to Dan Denton for reporting this.

We published a new issue of the elmah.io Newsletter: https://mailchi.mp/elmah/why-ienumerable-can-kill-performance-16562625

If you want to receive an email every 2-3 months with all of the recent goodies on elmah.io, make sure to subscribe here: http://eepurl.com/dE1hCn

https://blog.elmah.io/why-ienumerable-can-kill-performance-in-hot-paths/

Discover why using IEnumerable in C# hot paths can slow performance by 7x. Learn how List and Span optimize memory and speed for high throughput.

https://blog.elmah.io/polymorphic-relationships-in-ef-core-three-approaches/

Master polymorphic relationships in EF Core. Explore TPH, TPT, and TPC inheritance patterns with code examples to optimize your database design.

We released Organization recommendations yesterday, and today we are launching the first two new recommendation types:

• A recommendation to notify you when your organization has users with bounced emails.
• A recommendation to notify you when your organization has users with unverified emails.

Recommendations now cover your elmah.io organization. Access the new Recommendations tab by clicking the Overview icon next to the organization name on either the dashboard or the left menu.

This new view focuses on organization-wide insights rather than individual logs. This will include recommendations regarding the general state of your organization, security or configuration issues, and aggregated data analysis across multiple logs. We will continue to expand these insights to identify trends and potential problems that span your entire account.

While the list is currently empty, we are deploying the first two organization recommendation types within the next 24 hours. To stay updated, click the Subscribe button in the top-right corner of the view to receive email notifications when new organization-level recommendations are generated.