This release keeps dependencies and maintenance posture current for teams operating this tool.
Published 26d
Developer Productivity
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
github
github-notifications
inbox
notifications
octobox
rails
+2 more
ruby
triage
Affected surfaces
deps
Summary
AI summaryMinor fixes and improvements.
Full changelog
What's Changed
- build(deps): Bump octicons_helper from 19.27.0 to 19.28.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4537
- build(deps-dev): Bump rouge from 4.7.0 to 5.0.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4539
- build(deps): Bump sidekiq from 8.1.5 to 8.1.6 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4538
- build(deps): Bump octicons_helper from 19.28.0 to 19.28.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4543
- build(deps): Bump fugit from 1.12.1 to 1.12.2 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4542
- build(deps): Bump msgpack from 1.8.0 to 1.8.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4541
- build(deps): Bump github/codeql-action from 4.36.0 to 4.36.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4547
- build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4546
- build(deps): Bump faraday-net_http from 3.4.3 to 3.4.4 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4549
- build(deps): Bump version_gem from 1.1.9 to 1.1.11 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4548
- build(deps): Bump psych from 5.3.1 to 5.4.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4544
- build(deps): Bump net-imap from 0.6.4 to 0.6.4.1 in the bundler group across 1 directory by @dependabot[bot] in https://github.com/octobox/octobox/pull/4545
- build(deps): Bump bootsnap from 1.24.5 to 1.24.6 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4551
- build(deps): Bump auth-sanitizer from 0.1.4 to 0.2.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4550
- build(deps): Bump github/codeql-action from 4.36.1 to 4.36.2 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4552
- build(deps): Bump oj from 3.17.1 to 3.17.3 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4554
- build(deps): Bump websocket-driver from 0.8.0 to 0.8.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4553
- build(deps): Bump oauth2 from 2.0.20 to 2.0.23 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4555
- build(deps): Bump snaky_hash from 2.0.4 to 2.0.6 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4556
- build(deps): Bump ruby/setup-ruby from 1.310.0 to 1.312.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4557
- build(deps): Bump ruby/setup-ruby from 1.312.0 to 1.313.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4558
- build(deps): Bump redis-client from 0.29.0 to 0.30.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4559
- build(deps-dev): Bump brakeman from 8.0.4 to 8.0.5 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4560
- build(deps): Bump the bundler group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/octobox/octobox/pull/4561
- build(deps): Bump i18n from 1.14.8 to 1.15.2 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4562
- build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4563
- build(deps): Bump oauth2 from 2.0.23 to 2.0.24 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4565
- build(deps): Bump pp from 0.6.3 to 0.6.4 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4566
- build(deps): Bump ruby/setup-ruby from 1.313.0 to 1.314.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4567
- build(deps): Bump octicons_helper from 19.28.1 to 19.29.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4571
- build(deps): Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4568
- Handle 423 Locked sync polling by @knu in https://github.com/octobox/octobox/pull/4569
- Support large GitHub account IDs by @knu in https://github.com/octobox/octobox/pull/4570
- Fix false Sync failed alert by @knu in https://github.com/octobox/octobox/pull/4572
- Run CI on pull requests by @andrew in https://github.com/octobox/octobox/pull/4573
- Check response.ok on remaining fetch calls by @andrew in https://github.com/octobox/octobox/pull/4574
- Make GITHUB_WEBHOOK_SECRET requirement clearer by @andrew in https://github.com/octobox/octobox/pull/4575
- Move label scope dedup into a subquery by @andrew in https://github.com/octobox/octobox/pull/4576
- Fall back to root_path for off-host omniauth origins by @andrew in https://github.com/octobox/octobox/pull/4577
- Add brakeman.ignore with notes for the four current warnings by @andrew in https://github.com/octobox/octobox/pull/4578
Full Changelog: https://github.com/octobox/octobox/compare/june-2026...july-2026
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]