Releases
Box Ox 2.4.5
Captured account identifiers removed from the source.
On this page
Released October 20, 2026.
Clean source download#
The 2.4.3 and 2.4.4 source ZIPs still contained Cloudflare identifiers captured from a live account in test fixtures: a zone ID, queue, event-subscription, routing-rule, sending-subdomain and DNS-record IDs, message and event IDs, and bounce addresses. 2.4.5 replaces each one with a consistent stand-in, so the fixtures still cross-reference correctly. The 2.4.3 and 2.4.4 source ZIPs are withdrawn. Their manifests remain as historical records.
These are identifiers, not credentials. No API token, key or password was in any release.
Email skill 0.4.1 and brand assets 1.1.1#
The email skill and brand asset bundles now carry the project license notice without a personal name. Email skill 0.1.0 to 0.4.0 and brand assets 1.0.0 and 1.1.0 are withdrawn. Email skill 0.4.1 is otherwise identical to 0.4.0.
Publication checks#
The release privacy check now also blocks Cloudflare zone, queue, subscription, rule, KV and DNS-record IDs and bounce addresses that are not stand-ins. It fails on the withdrawn 2.4.4 source ZIP.
Verification limits#
Application code, migrations, SDK 0.2.0 and CLI 0.2.0 are unchanged from 2.4.4. This release changes test fixtures, license notices and packaging only. It does not establish a new fresh-account installation, mail round trip, or throughput result.