Docker: Update Chromium to 141.0.7390.107 (#816)

Author: Proximyst

CHANGELOG.md

@@ -1,3 +1,7 @@
+## 4.0.20 (2025-10-17)
+
+- Docker: Update Chromium to 141.0.7390.107 (CVE-2025-11756), [#816](https://github.com/grafana/grafana-image-renderer/pull/816), [Proximyst](https://github.com/Proximyst)
+
 ## 4.0.19 (2025-10-14)
 
 This release does not change the current Grafana Image Renderer, it is only issued to release new tags of the `-golang` variants for further testing.

Dockerfile

@@ -5,11 +5,11 @@ SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 # If we ever need to bust the cache, just change the date here.
 # While we don't cache anything in Drone, that might not be true when we migrate to GitHub Actions where some action might automatically enable layer caching.
 # This is fine, but is terrible in situations where we want to _force_ an update of a package.
-RUN echo 'cachebuster 2025-10-13' && apt-get update
+RUN echo 'cachebuster 2025-10-17' && apt-get update
 
 FROM debian-updated AS debs
 
-ARG CHROMIUM_VERSION=141.0.7390.65
+ARG CHROMIUM_VERSION=141.0.7390.107
 RUN apt-cache depends chromium=${CHROMIUM_VERSION} chromium-driver chromium-shell chromium-sandbox font-gothic fonts-wqy-zenhei fonts-thai-tlwg fonts-khmeros fonts-kacst fonts-freefont-ttf libxss1 unifont fonts-open-sans fonts-roboto fonts-inter bash util-linux openssl tini ca-certificates locales libnss3-tools \
   --recurse --no-recommends --no-suggests --no-conflicts --no-breaks --no-replaces --no-enhances --no-pre-depends | grep '^\w' | xargs apt-get download
 RUN mkdir /dpkg && \

go.Dockerfile

@@ -23,9 +23,9 @@ SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
 # If we ever need to bust the cache, just change the date here.
 # While we don't cache anything in Drone, that might not be true when we migrate to GitHub Actions where some action might automatically enable layer caching.
 # This is fine, but is terrible in situations where we want to _force_ an update of a package.
-RUN echo 'cachebuster 2025-10-06' && apt-get update
+RUN echo 'cachebuster 2025-10-17' && apt-get update
 
-ARG CHROMIUM_VERSION=141.0.7390.65
+ARG CHROMIUM_VERSION=141.0.7390.107
 RUN apt-cache depends chromium=${CHROMIUM_VERSION} chromium-driver chromium-shell chromium-sandbox font-gothic fonts-wqy-zenhei fonts-thai-tlwg fonts-khmeros fonts-kacst fonts-freefont-ttf libxss1 unifont fonts-open-sans fonts-roboto fonts-inter bash busybox util-linux openssl tini ca-certificates locales libnss3-tools \
   --recurse --no-recommends --no-suggests --no-conflicts --no-breaks --no-replaces --no-enhances --no-pre-depends | grep '^\w' | xargs apt-get download
 RUN mkdir /dpkg && \

plugin.json

@@ -24,8 +24,8 @@
         "url": "https://github.com/grafana/grafana-image-renderer/blob/master/LICENSE"
       }
     ],
-    "version": "4.0.19",
-    "updated": "2025-10-14"
+    "version": "4.0.20",
+    "updated": "2025-10-17"
   },
   "dependencies": {
     "grafanaDependency": ">=11.3.8"