Changing order of source blocks changes which gems are loaded from which source

[isen0011]

When I have a Gemfile that looks like this:

source 'https://rubygems.org' do
  ruby '2.4.1'
  gem 'rails', '~> 5.1.2'
end

source "https://artifactory.umn.edu/artifactory/api/gems/asr-rubygems/" do
  gem "lastpassify"
end

Bundler tries to load minitest (sub-requirement of rails) from the second source server:

Gem::RemoteFetcher::FetchError: too many connection resets
(https://isen0011:[email protected]/artifactory/api/gems/asr-rubygems/gems/minitest-5.10.3.gem)

But, if I change the order of the two source statements, so the Gemfile looks like this:

source "https://artifactory.umn.edu/artifactory/api/gems/asr-rubygems/" do
  gem "lastpassify"
end

source 'https://rubygems.org' do
  ruby '2.4.1'
  gem 'rails', '~> 5.1.2'
end

...everything installs correctly, with minitest loading from rubygems.org

repro script.
Note that I am using our internal artifactory server as a source for one of the two gems, which would need to be changed to make this work for anyone outside our organization.

[segiddins]

All I get is

Could not fetch specs from
https://artifactory.umn.edu/artifactory/api/gems/asr-rubygems/

[colby-swandale]

ping @isen0011

[segiddins]

This will be fixed in Bundler 2 by #5985, so I'm going to close this out. Thanks for reporting it!