I know that sandbox accounts can update managed bundles without the owner updating it. I am assuming that RP accounts are similar. I was told by support that production accounts must have the bundles upgraded by the bundle owner.