Merge pull request #5839 from tvdeyen/backport/v4.3/pr-5812

[v4.3] Lock solidus_core.gemspec to ransack '< 4.2'

admin/spec/components/previews/solidus_admin/ui/thumbnail/component_preview/overview.html.erb

@@ -50,7 +50,7 @@
 <div class="flex gap-4">
   <% product = Spree::Product.new(name: "A good product") %>
   <% attachment = Object.new.tap { def _1.url(*) "https://placekitten.com/280/200"; end }  %>
-  <% image = Spree::Image.new.tap { _1.define_singleton_method(:attachment) { attachment } } %>
+  <% image = Spree::Image.new.tap { |img| img.define_singleton_method(:attachment) { attachment } } %>
   <% [
     Spree::PromotionAction.new,
     Spree::UnitCancel.new,

core/solidus_core.gemspec

@@ -43,7 +43,9 @@ Gem::Specification.new do |s|
   s.add_dependency 'monetize', '~> 1.8'
   s.add_dependency 'kt-paperclip', ['>= 6.3', '< 8']
   s.add_dependency 'psych', ['>= 4.0.1', '< 6.0']
-  s.add_dependency 'ransack', '~> 4.0'
+  # @note ransack 4.2 contains a bug which has not yet been addressed.
+  # @see https://github.com/activerecord-hackery/ransack/pull/1468
+  s.add_dependency 'ransack', ['~> 4.0', '< 4.2']
   s.add_dependency 'sprockets-rails'
   s.add_dependency 'state_machines-activerecord', '~> 0.6'
   s.add_dependency 'omnes', '~> 0.2.2'