Update golang:1.25.4-bookworm Docker digest to e174196

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
golang	stage	digest	c5a9ab3 -> e174196

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🤖 Claude Code Review

PR Code Review Results

Summary

This PR updates the Docker base image SHA256 digest for golang:1.25.4-bookworm in two Dockerfiles. This is a routine dependency update, likely automated by Renovate bot.

---

Code Quality

✅ Code follows style guide

The changes are minimal and follow standard Dockerfile practices. ARG declarations are properly formatted.

✅ No commented-out code

No commented-out code present in the changes.

✅ Meaningful variable names

Variable names (IMAGE_BUILDER) are clear and descriptive.

✅ DRY principle followed

The same change is consistently applied to both Dockerfiles, maintaining consistency.

✅ No defects identified

Changes:

• Dockerfile:5 - Updated SHA256 digest
• package.Dockerfile:6 - Updated SHA256 digest

The changes only update the SHA256 digest for the same base image version (golang:1.25.4-bookworm), which is a security best practice. No logic errors, edge cases, or vulnerabilities introduced.

---

Testing

⚠️ Unit tests for new functions

N/A - No new functions added. This is an infrastructure change.

⚠️ Integration tests for new endpoints

N/A - No new endpoints added.

⚠️ Edge cases covered

N/A - Dependency update only.

❓ Test coverage > 80%

Cannot verify - The PR diff doesn't include test coverage changes. This is a Docker base image update, so existing tests should validate that builds still work correctly.

Recommendation: Ensure CI/CD pipeline validates that Docker builds succeed with the new image digest.

---

Documentation

✅ Readme updated if needed

Not required - This is an automated dependency update that doesn't change functionality or user-facing behavior.

✅ API docs updated

Not required - No API changes.

✅ Inline comments for complex logic

Not applicable - Dockerfile ARG updates require no additional comments.

❌ CHANGELOG.md updated

Issue found: CHANGELOG.md exists in the repository but hasn't been updated for this change.

Recommendation: While automated dependency updates may not always warrant changelog entries, consider documenting Docker base image updates, especially those affecting security (SHA256 digest updates ensure image integrity).

---

Security

✅ No hardcoded credentials

No credentials present in the changes.

✅ Input validation implemented

Not applicable - No input handling in these changes.

✅ Proper error handling

Not applicable - No error handling logic in these changes.

✅ No sensitive data in logs

No logging changes present.

🚨 CRITICAL: License file detected

File: testdata/senzing-license/g2.lic

Status: This is a test license file in the testdata/ directory (not part of the PR diff), but flagging as required by the security checklist. The file contains binary/encoded data typical of license files. However, this appears to be a legitimate test fixture for a test license (note "Senzing Public Test License" header).

Note: This file is NOT part of this PR - it exists in the repository but is not modified by these changes.

---

Overall Assessment

✅ APPROVED with minor recommendation

Strengths:

• Clean, focused change updating Docker base image digests
• Maintains consistency across both Dockerfiles
• Security best practice (pinning image digests)
• No code quality, logic, or security issues introduced

Minor Recommendations:

1. Consider adding a CHANGELOG entry for dependency updates
2. Ensure CI/CD validates Docker builds with new image digest

Changes:

• Dockerfile:5 - golang:1.25.4-bookworm SHA updated
• package.Dockerfile:6 - golang:1.25.4-bookworm SHA updated

This is a low-risk maintenance update with no functional changes.

Automated code review analyzing defects and coding standards