4.0.3 release

[finnlewis]

Keen to avoid the question about tbachert/spi on install:

tbachert/spi contains a Composer plugin which is currently not in your allow-plugins config. See https://getcomposer.org/allow-plugins
Do you trust "tbachert/spi" to execute code and wish to enable it now? (writes "allow-plugins" to composer.json) [y,n,d,?] y

[finnlewis]

@stephen-cox any idea why the tests are not running on this one?

[finnlewis]

I'd like to get the tests running on this before we merge and release.

[ekes]

Think this needs localgovdrupal/localgov_microsites_group#542 to pass now, that removes the patch that is failing to apply here.