On the 24th of October the unauthenticated oEmbed API from Facebook and Instagram will stop working. They will require authentication to fetch oEmbed objects.
Are there any consequences for Onebox? I couldn’t find any changes in the GitHub repo regarding this yet.