relax octokit dependency to minor release ~> 3.7

They follow SemVer and recommends locking upto two digits https://github.com/octokit/octokit.rb