In case you are having difficulty the change in question was:
Turned the group membership lookup into a strategy.
That changed the configuration format of the LDAP security realm. This is normally not a big deal... as long as you do not roll back the plugin... if you roll the plugin back to version 1.9 or earlier, then those versions will no longer be able to read the new configuration format and you may get locked out.
All Jenkins plugins can set a flag: compatibleSinceVersion
If set, then you get the standard boilerplate warning text if you are upgrading from an older version of the plugin than the `compatibleSinceVersion`
Plugin authors are supposed to set this version to the oldest version of the plugin that you can revert to without breaking the ability to parse the data on disk using the older plugin's parser.
Because the message has to be generic, it is typically more scary than it needs to be, but we only have one flag and a speed-bump is better than just having people upgrade unthinkingly, find a bug, revert the plugin to the old version and *BOOM* you are locked out of Jenkins because after the upgrade your configuration was updated to the new format and the downgraded plugin cannot read the new format.