When bundle update runs without --conservative, bundler freely updates
transitive dependencies of listed gems. This caused blocked gems (e.g.
html-to-markdown, too recently published) to be pulled in as transitive
deps of allowed gems (e.g. readcube-assistant), bypassing the age check.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>