Update senzing/senzingsdk-runtime Docker tag to v4.2.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
senzing/senzingsdk-runtime	stage	patch	4.2.2 → 4.2.3
senzing/senzingsdk-runtime	final	patch	4.2.2 → 4.2.3

---

Release Notes

Senzing/senzingsdk-runtime (senzing/senzingsdk-runtime)

v4.2.3

Compare Source

Changed in 4.2.3

• Based on Senzing 4.2.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🤖 Claude Code Review

PR Code Review

This PR updates the senzing/senzingsdk-runtime Docker image from version 4.2.2 to 4.2.3 in both Dockerfile and package.Dockerfile.

---

Code Quality

• ✅ Style guide: Dockerfile changes follow existing conventions — ARG declarations at the top of stages, pinned with both tag and digest.
• ✅ No commented-out code: None present.
• ✅ Meaningful variable names: IMAGE_FINAL and IMAGE_SENZINGSDK_RUNTIME are clear.
• ✅ DRY principle: The same image reference appears in two separate Dockerfiles, but this is expected for separate build targets. No duplication concern here.
• ✅ Defects / security: Both files update to the same new digest (sha256:0e81fcbe25c5c4908b13c3bd063fed028a1bc75ecfd6baa0c83009be6f65e277), and both are consistent with each other. Digest pinning is a security best practice — no issues.
• ✅ CLAUDE.md: No concerns; the project instructions are appropriately general.

---

Testing

• ✅ Unit/integration tests: Not applicable — this is a base image version bump with no code logic changes.
• ✅ Test coverage: N/A.

---

Documentation

• ✅ README: No update needed for a runtime image bump.
• ✅ API docs: N/A.
• ✅ Inline comments: N/A.
• ⚠️ CHANGELOG.md: Not included in the diff. If this project maintains a changelog, a dependency bump entry (e.g., chore(deps): update senzingsdk-runtime to 4.2.3) would be appropriate. This is a minor concern since the commit history and Renovate/Dependabot typically handle this automatically for dependency updates.

---

Security

• ✅ No hardcoded credentials: None.
• ✅ Input validation: N/A.
• ✅ Error handling: N/A.
• ✅ No sensitive data in logs: N/A.
• ✅ No license files (.lic) or AQAAAD-prefixed content: None present.

---

Summary

This is a clean, minimal dependency bump. Both Dockerfiles are updated consistently with matching tag and digest. No issues found. The only minor note is to verify whether a CHANGELOG entry is expected for this project's release process.

Automated code review analyzing defects and coding standards