Ruby Bundler is introducing a new cooldown feature to mitigate supply chain attacks that exploit the brief window immediately after a compromised gem is published. The new cooldown period delays the availability of newly released packages, preventing malicious versions from being instantly resolved during a standard bundle install.