fix: install a supported version of box