Docker: Download Chromium from Alpine edge (#648)

Author: Proximyst

CHANGELOG.md

@@ -1,6 +1,6 @@
 ## 3.12.7 (2025-06-19)
 
-- Chore: Update base Docker image to latest, [macabu](https://github.com/macabu)
+- Chore: Update base Docker image to latest (CVE-2025-5959), [#647](https://github.com/grafana/grafana-image-renderer/pull/647), [#648](https://github.com/grafana/grafana-image-renderer/pull/648), [macabu](https://github.com/macabu), [Proximyst](https://github.com/Proximyst)
 - Tracing: Add debug logs when verbose logging is enabled [#644](https://github.com/grafana/grafana-image-renderer/pull/644), [AgnesToulet](https://github.com/AgnesToulet)
 
 ## 3.12.6 (2025-05-23)

Dockerfile

@@ -10,8 +10,11 @@ ENV XDG_CACHE_HOME=/tmp/.chromium
 
 WORKDIR /usr/src/app
 
+# We use edge for Chromium to get the latest release.
+# Can be back to stable when 3.22 gets .103.
 RUN apk --no-cache upgrade && \
-    apk add --no-cache udev ttf-opensans unifont chromium chromium-swiftshader ca-certificates dumb-init && \
+    apk add --no-cache udev ttf-opensans unifont ca-certificates dumb-init && \
+    apk add --no-cache chromium chromium-swiftshader --repository=https://dl-cdn.alpinelinux.org/alpine/edge/community && \
     # Remove NPM-related files and directories
     rm -rf /usr/local/lib/node_modules/npm && \
     rm -rf /usr/local/bin/npm && \