Maintenance release of the 2.x branches to merge users of the 2.1.x and defunct 2.2.x branches.
The 2.2.0 release messed up semantic versioning with a major change to Drupal Core support, but only as a minor release. It was then marked as unsupported and an identical 3.0.0 released. Composer did not understand this and provided the unsupported 2.2.0 as a valid update for 2.1.x users.
Superseding branch for 2.1.x and 2.2.x branches. Future development should be in the 3.x branches.
Released to address bad releases in the 2.2.x branch which was erroneously being offered as an update option for Drupal 10 sites. Drupal 11 & 12 sites should use 3.x branch.
This is the last feature adding release of the 8.x-1.x branch. All future features should be patched against the 2.0.x or subsequent branches.
Developers note
As of 8.x-1.2 hook_password() is deprecated and removed in 2.0.0. There is no replacement in this version as it is not supported until Drupal 9.1. Please upgrade to 2.0.0 if using Drupal 9.
Back-port of password generation (and alter hooks) from 8.x-1.x/2.0.x branch which guarantees a generated password includes a character from each character set. A developer can alter the characters used during generation.
Bug fix on AJAX accessed user registration form causing extraneous error messages and ignoring admin entered password.
This is likely the last release before 8.x-1.0 final. The biggest change is to password generation. The password is now more likely to conform to password policies consistently and it uses a stronger source of randomness to choose random characters.
