0.9.23
This release backports the fix for a GID-collision issue when id_attr_map = name (the 0.9.x default). Because Entra ID allows duplicate group display names, prior versions could map different groups to the same numeric GID, potentially granting unintended access to GID-gated resources (files/etc). 0.9.23 now maps groups by objectId (GUID), eliminating these collisions—but numeric GIDs will change on hosts using the default setting.
Full Changelog: 0.9.22...0.9.23