This was a regression in bundler 2.2.0. It's been fixed, and the pin was removed from puppet in https://github.com/puppetlabs/puppet/pull/8466