bundler

Cooldown does not fix the resolver

Bundler 4.0.13's cooldown filter refuses to resolve gem versions newer than N days, closing the supply-chain window while other defenses catch a bad release.