- Fixing ERB injection vulnerability with #825. Good idea to upgrade if you're letting un-trusted users edit content. - Updating vendored Bootstrap to v4.1.1