CVE-2022-39253 break RubyGems/Bundler tests and behavior.

[hsbt]

Describe the problem as clearly as you can

In recent few days ago, rubygems tests were failed in my dev machine.

  1) Failure:
TestGemSourceGit#test_checkout_submodules [/Users/hsbt/Documents/github.com/ruby/ruby/test/rubygems/test_gem_source_git.rb:73]:
fatal: transport 'file' not allowed
fatal: clone of '/Users/hsbt/Documents/github.com/ruby/ruby/tmp/test_rubygems_20221019-16443-neo1ri/git/b' into submodule path '/Users/hsbt/Documents/github.com/ruby/ruby/tmp/test_rubygems_20221019-16443-neo1ri/git/a/b' failed

What actually happened?

https://github.blog/2022-10-18-git-security-vulnerabilities-announced/#cve-2022-39253

Git 2.38.1 refuse to git submodule add with file protocol. We should handle cve-2022-39253 changes to RubyGems/Bundler for Git.

[nobu]

git submodule update too.

[hsbt]

We can pass them with -c protocol.file.allow=always option. But it disables the security limitation of Git.

[hsbt]

@deivid-rodriguez @simi I create the workaround for this.

ruby/ruby#6587