Features and enhancements
Chore: Improve domain validation for Google OAuth - Backport 83229 to v10.3.x. #83725, @linoman
Bug fixes
LDAP: Fix LDAP users authenticated via auth proxy not being able to use LDAP active sync. #83750, @Jguer
Tempo: Add template variable interpolation for filters (#83213). #83706, @joey-grafana
Elasticsearch: Fix adhoc filters not applied in frontend mode. #83596, @svennergr
Dashboards: Fixes issue where panels would not refresh if time range updated while in panel view mode. #83525, @kaydelaney
Auth: Fix email verification bypass when using basic authentication. #83484
AuthProxy: Invalidate previous cached item for user when changes are made to any header. #83203, @klesh
LibraryPanels/RBAC: Fix issue where folder scopes weren't being correctly inherited. #82902, @kaydelaney
LibraryPanels: Fix issue with repeated library panels. #82259, @kaydelaney
Plugins: Don't auto prepend app sub url to plugin asset paths. #82147, @wbrowne
Elasticsearch: Set middlewares from Grafana's httpClientProvider. #81929, @svennergr
Folders: Fix failure to update folder in SQLite. #81862, @papagian
Loki/Elastic: Assert queryfix value to always be string. #81463, @svennergr
Breaking changes
We're adding a between the response of the ID token HD parameter
and the list of allowed domains. This feature can be disabled
through the configuration toggle validate_hd . Anyone using the
legacy Google OAuth configuration should disable this validation
if the ID Token response doesn't have the HD parameter. Issue #83725
f7cb8016b3