Cooldown Support for Ruby Bundler
bundlerrubygemscooldownsecuritysupply-chain attackssoftware developmentdeveloper toolsenvironments
Author: calyhre
Date: 6/3/2026
Article Summary:
Bundler 4.0.13 introduces a cooldown feature that refuses to resolve to a version until it has been public for at least N days to prevent supply-chain attacks.