This release includes 4 breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+12 more
Affected surfaces
ReleasePort's take
Moderate signalDELETE /api/v1 endpoints now return the deleted resource directly instead of a wrapper.
Why it matters: The change alters response structure for DELETE calls; code expecting a wrapper must be updated before upgrade to v0.2.13.
Summary
AI summaryDELETE /api/v1 endpoints return the deleted resource directly instead of a wrapper.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
500 responses no longer echo internal error messages. 500 responses no longer echo internal error messages. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Breaking | High |
DELETE endpoints now return deleted resource directly instead of wrapper. DELETE endpoints now return deleted resource directly instead of wrapper. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Feature | Low |
Local-mode deployments now support multiple brands with "Create new brand" option. Local-mode deployments now support multiple brands with "Create new brand" option. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Feature | Low |
Added sort control to Visibility page. Added sort control to Visibility page. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Feature | Low |
Added Query Fan‑Out section showing prompt‑to‑query diffs and missing searches. Added Query Fan‑Out section showing prompt‑to‑query diffs and missing searches. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Feature | Low |
Added new citation source categories and Google Shopping breakdown to citations dashboard. Added new citation source categories and Google Shopping breakdown to citations dashboard. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Feature | Low |
Added Google Shopping breakdown to prompt's Citations tab on prompt details page. Added Google Shopping breakdown to prompt's Citations tab on prompt details page. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
PATCH endpoints reject empty body with 400 status. PATCH endpoints reject empty body with 400 status. Source: llm_adapter@2026-06-12 Confidence: high |
— |
| Bugfix | Medium |
/tools/analyze now returns 400 for unparseable website instead of 500. /tools/analyze now returns 400 for unparseable website instead of 500. Source: llm_adapter@2026-06-12 Confidence: high |
— |
Full changelog
What's Changed
- Added new citation source categories and a Google Shopping breakdown to the citations dashboard. by @jrhizor
- Local-mode deployments now support multiple brands. The brand switcher shows a "Create new brand" option that provisions a new org + admin membership for the user. by @jrhizor
- Added the Google Shopping breakdown to a prompt's Citations tab on the prompt details page. by @jrhizor
- Added a sort control to the Visibility page. by @jrhizor
- Added a Query Fan-Out section showing the searches AI engines run for your prompts, with a prompt-to-query diff, the words engines add or drop, and the searches you're missing. by @jrhizor
- Breaking:
/api/v1DELETE endpoints now return the deleted resource directly instead of a{ message, data }wrapper (the deleted prompt includes adeletedRunsCountfield), PATCH endpoints reject an empty body with a 400, an unparseablewebsiteon/tools/analyzeis now a 400 instead of a 500, and 500 responses no longer echo internal error messages. by @jrhizor
Full Changelog: https://github.com/elmohq/elmo/compare/v0.2.12...v0.2.13
Breaking Changes
- /api/v1 DELETE endpoints now return the deleted resource directly instead of a { message, data } wrapper (includes deletedRunsCount).
- /api/v1 PATCH endpoints reject an empty body with a 400 status.
- /tools/analyze unparseable `website` parameter now returns 400 instead of 500.
- 500 responses no longer echo internal error messages.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Elmo (Open Source AEO)
All releases →Related context
Related tools
Earlier breaking changes
- v0.2.15 Requires database migrations for brand/org configuration changes to support Elmo Cloud
- v0.2.10 elmo start, stop, logs, build aliases removed; use elmo compose directly
- v0.2.10 ~/.elmo/config.json file removed; configuration moved entirely to .env
- v0.2.10 elmo telemetry command removed; DISABLE_TELEMETRY toggle now in .env
Beta — feedback welcome: [email protected]