workbench_moderation security update (in govCMS 1.4, recommended 3.0 + drafty reqd)

Issue created on github here: https://github.com/govCMS/govCMS/issues/392

On the basis of previous interactions, I would expect the issue to be tracked/progressed in github. I am raising the issue here on drupal.org also so that others not initiated with this process will see that the issue has been raised.

in govCMS 2.10 workbench_moderation is at 1.4 but there is a security update for workbench_moderation - upgrade to 3.0 is recommended https://www.drupal.org/node/2824455

In the govcms distro see profiles/govcms/modules/contrib/workbench_moderation). The module is active in the distro (i.e. enabled)

To upgrade to workbench_moderation 3.0, you will also need module drafty which is a dependency.