Download page What's new highlights

Features and enhancements

• Chore: Improve domain validation for Google OAuth - Backport 83229 to v10.3.x. #83725, @linoman

Bug fixes

• LDAP: Fix LDAP users authenticated via auth proxy not being able to use LDAP active sync. #83750, @Jguer
• Tempo: Add template variable interpolation for filters (#83213). #83706, @joey-grafana
• Elasticsearch: Fix adhoc filters not applied in frontend mode. #83596, @svennergr
• Dashboards: Fixes issue where panels would not refresh if time range updated while in panel view mode. #83525, @kaydelaney
• Auth: Fix email verification bypass when using basic authentication. #83484
• AuthProxy: Invalidate previous cached item for user when changes are made to any header. #83203, @klesh
• LibraryPanels/RBAC: Fix issue where folder scopes weren't being correctly inherited. #82902, @kaydelaney
• LibraryPanels: Fix issue with repeated library panels. #82259, @kaydelaney
• Plugins: Don't auto prepend app sub url to plugin asset paths. #82147, @wbrowne
• Elasticsearch: Set middlewares from Grafana's httpClientProvider. #81929, @svennergr
• Folders: Fix failure to update folder in SQLite. #81862, @papagian
• Loki/Elastic: Assert queryfix value to always be string. #81463, @svennergr

Breaking changes

We're adding a between the response of the ID token HD parameter and the list of allowed domains. This feature can be disabled through the configuration toggle validate_hd . Anyone using the legacy Google OAuth configuration should disable this validation if the ID Token response doesn't have the HD parameter. Issue #83725