I can’t speak for the GP, but I have wasted a good number of hours on problems relating to bundler installing/upgrading global gems. There is --path, which solves this, but it seems to me that "--path vendor" (or something similar) should have been the default, similar to how npm will never touch anything outside your project directory without being explicitly asked to do so.