Skip to content

Octobox

vjuly-2026 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

github github-notifications inbox notifications octobox rails
+2 more
ruby triage

Affected surfaces

deps

Summary

AI summary

Minor fixes and improvements.

Full changelog

What's Changed

  • build(deps): Bump octicons_helper from 19.27.0 to 19.28.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4537
  • build(deps-dev): Bump rouge from 4.7.0 to 5.0.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4539
  • build(deps): Bump sidekiq from 8.1.5 to 8.1.6 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4538
  • build(deps): Bump octicons_helper from 19.28.0 to 19.28.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4543
  • build(deps): Bump fugit from 1.12.1 to 1.12.2 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4542
  • build(deps): Bump msgpack from 1.8.0 to 1.8.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4541
  • build(deps): Bump github/codeql-action from 4.36.0 to 4.36.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4547
  • build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4546
  • build(deps): Bump faraday-net_http from 3.4.3 to 3.4.4 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4549
  • build(deps): Bump version_gem from 1.1.9 to 1.1.11 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4548
  • build(deps): Bump psych from 5.3.1 to 5.4.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4544
  • build(deps): Bump net-imap from 0.6.4 to 0.6.4.1 in the bundler group across 1 directory by @dependabot[bot] in https://github.com/octobox/octobox/pull/4545
  • build(deps): Bump bootsnap from 1.24.5 to 1.24.6 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4551
  • build(deps): Bump auth-sanitizer from 0.1.4 to 0.2.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4550
  • build(deps): Bump github/codeql-action from 4.36.1 to 4.36.2 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4552
  • build(deps): Bump oj from 3.17.1 to 3.17.3 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4554
  • build(deps): Bump websocket-driver from 0.8.0 to 0.8.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4553
  • build(deps): Bump oauth2 from 2.0.20 to 2.0.23 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4555
  • build(deps): Bump snaky_hash from 2.0.4 to 2.0.6 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4556
  • build(deps): Bump ruby/setup-ruby from 1.310.0 to 1.312.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4557
  • build(deps): Bump ruby/setup-ruby from 1.312.0 to 1.313.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4558
  • build(deps): Bump redis-client from 0.29.0 to 0.30.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4559
  • build(deps-dev): Bump brakeman from 8.0.4 to 8.0.5 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4560
  • build(deps): Bump the bundler group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/octobox/octobox/pull/4561
  • build(deps): Bump i18n from 1.14.8 to 1.15.2 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4562
  • build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4563
  • build(deps): Bump oauth2 from 2.0.23 to 2.0.24 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4565
  • build(deps): Bump pp from 0.6.3 to 0.6.4 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4566
  • build(deps): Bump ruby/setup-ruby from 1.313.0 to 1.314.0 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4567
  • build(deps): Bump octicons_helper from 19.28.1 to 19.29.1 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4571
  • build(deps): Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in https://github.com/octobox/octobox/pull/4568
  • Handle 423 Locked sync polling by @knu in https://github.com/octobox/octobox/pull/4569
  • Support large GitHub account IDs by @knu in https://github.com/octobox/octobox/pull/4570
  • Fix false Sync failed alert by @knu in https://github.com/octobox/octobox/pull/4572
  • Run CI on pull requests by @andrew in https://github.com/octobox/octobox/pull/4573
  • Check response.ok on remaining fetch calls by @andrew in https://github.com/octobox/octobox/pull/4574
  • Make GITHUB_WEBHOOK_SECRET requirement clearer by @andrew in https://github.com/octobox/octobox/pull/4575
  • Move label scope dedup into a subquery by @andrew in https://github.com/octobox/octobox/pull/4576
  • Fall back to root_path for off-host omniauth origins by @andrew in https://github.com/octobox/octobox/pull/4577
  • Add brakeman.ignore with notes for the four current warnings by @andrew in https://github.com/octobox/octobox/pull/4578

Full Changelog: https://github.com/octobox/octobox/compare/june-2026...july-2026

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Octobox

Get notified when new releases ship.

Sign up free

About Octobox

Take back control of your GitHub Notifications.

All releases →

Related context

Beta — feedback welcome: [email protected]