I have been pulling the releases and not from the master itself. We are not cloning into the QuickBox project, rather, this is a handpicked and manual include that we perform time permitting.
The reason we pull it per release and not git pull is so we can stay on track with the support we provide. It basically is an easier method for us to keep track of what is what... especially when we are already supplying a plethora of applications. We don't technically support them, as we're not the maintainers of said packages, but we do try from time to time.
Additionally, looking at the 3 commits that have been applied since March, there really is no reason to pull them... 1 is a Readme update, another is some additional instructions added to a template file (just readable not functional) and the other is minifying css. Not really worth the effort in my opinion, nor will it change the fact that this bug exists still within the application.
If this method really seems to be a big deal to anyone then we can consider implementing a new method for inclusion. Here is the means we provide it currently: