Security update

Changes since 8.x-4.2:

• #2856732 by anon: Linking to files, do not use the domain?

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

This release contains a security fix.
This release contains a new feature: you can now add a comment to each time slot.

Release notes:
Issue #2859948: Apply coding standards - move .theme.inc into includes directory
Issue #2553935 by ripz0r: Add a comment field to each time slot
Issue #160135: Filter formatter output
Issue #2572823 by Kpolymorphic: Office hours block doesnt respect 'required' field setting.

This version fixes the vulnerabilities that resulted this project being unpublished.

If you are using any version of this module before this 7.x-2.1 release, we strongly advise you to upgrade to this version.

This project now has new maintainers:
- Ayesh
- Ben (@bnjmnm)

Fixes - PRLP - Critical - Possible User usurpation in password reset link - SA-CONTRIB-2017-028.

Users of the 8.x-1.x branch of the module are urged to upgrade to this version.

See SA-CONTRIB-2016-029

Issue #2858134 by pdenooijer: Spyc library keeps updating when updating modules with make

Issue #2858216 by mradcliffe: Fix bug in user logout API 1.1