Update alpine:3.23 Docker digest to 5b10f43

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
alpine	final	digest	2510918 → 5b10f43

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🤖 Claude Code Review

Code Review

PR Summary: Updates the alpine:3.23 Docker image SHA256 digest in the second stage of build/docker/Dockerfile.

---

Code Quality

• ✅ Style guide: Single-line change updating a pinned digest — no style concerns.
• ✅ No commented-out code: No new commented-out code introduced.
• ✅ Meaningful variable names: N/A.
• ✅ DRY principle: N/A.
• ✅ Defects: No bugs or logic errors. Pinning by digest is a good security practice. The update is consistent with using alpine:3.23 as the tag.
• ✅ Project CLAUDE.md: Reviewed. The .claude/CLAUDE.md belongs to the shared build-resources repo and is appropriate in scope — no local-environment-specific content.

Observation (pre-existing, not blocking): Both Dockerfile stage comments are labeled # Stage: build (Dockerfile lines 2 and 32). The second stage is the runtime/final stage and would be clearer labeled # Stage: final. This is pre-existing and outside this PR's scope.

---

Testing

• ✅ Unit/integration tests: Not applicable for a base image digest bump.
• ✅ Edge cases / coverage: Not applicable.

---

Documentation

• ✅ README: No update needed.
• ✅ API docs: N/A.
• ✅ Inline comments: N/A.
• ❌ CHANGELOG.md not updated (CHANGELOG.md): Per the project's code review standards, CHANGELOG.md should be updated for all changes. The last entry is [1.0.0] - 2020-01-11 and this digest bump is not reflected. A new entry under an [Unreleased] section (or a versioned section) should document this dependency update.
• ✅ Markdown formatting: No Markdown files changed.

---

Security

• ✅ No hardcoded credentials.
• ✅ Input validation: N/A.
• ✅ Error handling: N/A.
• ✅ No sensitive data in logs: N/A.
• ✅ No .lic files or AQAAAD strings.

---

Summary

One required change:

#	Severity	File	Issue
1	⚠️ Required	CHANGELOG.md	Add an entry for the alpine:3.23 digest update

The core change is correct and appropriate. Once CHANGELOG.md is updated, this PR is good to merge.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
DOCKERFILE_HADOLINT	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter