Update box to v0.4.0

Signed-off-by: Jonathan Rudenberg <jonathan@titanous.com>