Maybe you missed a package?
These are packages I have locked with the patch openSUSE-SLE-15.5-2023-3419
zypper ll
# | Name | Type | Repository | Comment
---+---------------------------------+---------+------------+--------
2 | libjavascriptcoregtk-4_0-18 | package | (any) |
3 | libjavascriptcoregtk-4_1-0 | package | (any) |
4 | libwebkit2gtk-4_0-37 | package | (any) |
5 | libwebkit2gtk-4_1-0 | package | (any) |
6 | openSUSE-SLE-15.5-2023-3419 | patch | (any) |
7 | typelib-1_0-WebKit2-4_0 | package | (any) |
8 | typelib-1_0-WebKit2-4_1 | package | (any) |
9 | webkit2gtk-4_0-injected-bundles | package | (any) |
10 | webkit2gtk-4_1-injected-bundles | package | (any) |
They should all have Version 2.38.6-150400.4.42.4