🧪 Disable RubyGems prelude in auth sanitizer load spec

Author: pboling

.rubocop_gradual.lock

@@ -1,9 +1,9 @@
 {
-  "spec/oauth2/auth_sanitizer_spec.rb:2223470268": [
+  "spec/oauth2/auth_sanitizer_spec.rb:1763449711": [
     [19, 14, 2, "Lint/Syntax: unexpected token tLSHFT\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 5859461],
-    [65, 35, 2, "Lint/Syntax: unexpected token tLSHFT\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 5859461],
-    [66, 38, 2, "Lint/Syntax: unexpected token tIDENTIFIER\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 5861278],
-    [66, 66, 4, "Lint/Syntax: unexpected token tIDENTIFIER\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 2087898353],
-    [68, 13, 1, "Lint/Syntax: unexpected token tCOLON\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 177567]
+    [66, 35, 2, "Lint/Syntax: unexpected token tLSHFT\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 5859461],
+    [67, 38, 2, "Lint/Syntax: unexpected token tIDENTIFIER\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 5861278],
+    [67, 66, 4, "Lint/Syntax: unexpected token tIDENTIFIER\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 2087898353],
+    [69, 13, 1, "Lint/Syntax: unexpected token tCOLON\n(Using Ruby 2.2 parser; configure using `TargetRubyVersion` parameter, under `AllCops`)", 177567]
   ]
 }

CHANGELOG.md

@@ -28,6 +28,9 @@ Please file a bug if you notice a violation of semantic versioning.
 
 ### Fixed
 
+- Fixed the isolated `auth-sanitizer` load-path regression spec so child Ruby
+  processes cannot inherit Bundler/Appraisal activation from CI startup.
+
 ### Security
 
 ## [2.0.24] - 2026-06-18

spec/oauth2/auth_sanitizer_spec.rb

@@ -54,6 +54,7 @@ def find_by_name(name, *requirements)
     stdout, stderr, status = Open3.capture3(
       ruby_env,
       RbConfig.ruby,
+      "--disable=gems",
       "-I",
       oauth2_lib,
       "-I",