Update senzing/senzingsdk-runtime Docker tag to v4.2.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
senzing/senzingsdk-runtime	final	patch	4.2.2 → 4.2.3
senzing/senzingsdk-runtime	stage	patch	4.2.2 → 4.2.3

---

Release Notes

Senzing/senzingsdk-runtime (senzing/senzingsdk-runtime)

v4.2.3

Compare Source

Changed in 4.2.3

• Based on Senzing 4.2.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🤖 Claude Code Review

PR Code Review

This PR updates the Senzing SDK runtime Docker base image from 4.2.2 to 4.2.3.

---

Code Quality

• ✅ Style guide — Single-line change in a Dockerfile; no style concerns.
• ✅ No commented-out code — Not applicable.
• ✅ Meaningful variable names — IMAGE_FINAL is clear and consistent with existing convention.
• ✅ DRY principle — Not applicable.
• ✅ Defects / bugs / race conditions — No logic changes; straightforward dependency bump.
• ✅ CLAUDE.md — Not applicable to this change.

---

Testing

• ✅ Unit / integration tests — No application logic changed; no new tests required.
• ✅ Edge cases — Not applicable.
• ✅ Test coverage — Not applicable.

---

Documentation

• ✅ README — No user-facing behavior changes.
• ✅ API docs — Not applicable.
• ✅ Inline comments — Not applicable.
• ⚠️ CHANGELOG.md — Not included in the diff. If this project maintains a changelog, a dependency bump entry (chore(deps): update senzingsdk-runtime to 4.2.3) is conventional and expected. Verify whether CHANGELOG.md was updated separately.
• ✅ Markdown formatting — Not applicable.

---

Security

• ✅ No hardcoded credentials — None present.
• ✅ Input validation — Not applicable.
• ✅ Error handling — Not applicable.
• ✅ No sensitive data in logs — Not applicable.
• ✅ License files — No .lic files or AQAAAD-prefixed strings.
• ✅ SHA256 digest pinned — The image reference includes a content-addressed digest (sha256:0e81fcbe25c5c4908b13c3bd063fed028a1bc75ecfd6baa0c83009be6f65e277), which prevents supply-chain substitution attacks. Good practice.

---

Summary

This is a minimal, low-risk dependency bump. The only item worth a quick check is whether the project's CHANGELOG.md was updated; everything else looks correct.

Automated code review analyzing defects and coding standards