bump permitted bundler

Change-Id: I289b943d141ed53a742606364a573ba620ec4b2d
Reviewed-on: https://gerrit.instructure.com/46318
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Rob Orton <rob@instructure.com>
Product-Review: Cody Cutrer <cody@instructure.com>
QA-Review: Cody Cutrer <cody@instructure.com>