bump boxen dep to mitigate ci errors