grafana-image-renderer/5.0.8 package update (#71649)

<p align="center">
<img
src="https://raw.githubusercontent.com/wolfi-dev/.github/b535a42419ce0edb3c144c0edcff55a62b8ec1f8/profile/wolfi-logo-light-mode.svg"
/>
</p>
<!--ci-cve-scan:fail-any-->


**Commit**: 72863f5f81d3de4a4068b34c188190cc6cb49027

<!--staging-update-bot-pr-data-->
<!--
{
  "PackageName": "grafana-image-renderer",
  "Version": "5.0.8",
  "Commit": "72863f5f81d3de4a4068b34c188190cc6cb49027",
  "BumpEpoch": false,
  "Manual": false
}
-->
<!--/staging-update-bot-pr-data-->

---------

Co-authored-by: update-bot <[email protected]>
Co-authored-by: Amber Arcadia <[email protected]>

Author: 3 people

grafana-image-renderer.yaml

@@ -1,6 +1,6 @@
 package:
   name: grafana-image-renderer
-  version: "4.1.5"
+  version: "5.0.8"
   epoch: 0 # GHSA-vj76-c3g6-qr5v
   description: A Grafana backend plugin that handles rendering of panels & dashboards to PNGs using headless browser (Chromium/Chrome)
   copyright:
@@ -10,62 +10,23 @@ package:
       - busybox
       - chromium
       - dumb-init
-      - nodejs-${{vars.node-version}}
-
-vars:
-  node-version: 22
 
 environment:
   contents:
     packages:
       - build-base
-      - busybox
-      - ca-certificates-bundle
-      - nodejs-${{vars.node-version}}
-      - npm
-      - scanelf
-      - ttf-dejavu
-      - yarn
 
 pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/grafana/grafana-image-renderer
       tag: v${{package.version}}
-      expected-commit: 26eb33198e23711ccf1f0eafec9ef24b84bba838
+      expected-commit: 72863f5f81d3de4a4068b34c188190cc6cb49027
 
-  - uses: patch
+  - uses: go/build
     with:
-      patches: |
-        bump-axios-CVE-2025-58754.patch
-
-  - runs: |
-      npm pkg set resolutions.on-headers=1.1.0
-      npm pkg set resolutions.@eslint/plugin-kit=0.3.4
-      npm pkg set resolutions.tar-fs=3.1.1
-      yarn install
-      yarn build
-
-      # Node module installs multi-arch libraries, this deletes them
-      scanelf -R -n . | awk '/aarch64/ {print $NF}' | xargs rm -rf
-
-      mkdir -p ${{targets.destdir}}/usr/src/app/
-
-      cp -r ./proto ${{targets.destdir}}/usr/src/app/
-      cp -r ./build ${{targets.destdir}}/usr/src/app/
-      cp -r ./node_modules ${{targets.destdir}}/usr/src/app/
-      cp ./default.json ${{targets.destdir}}/usr/src/app/config.json
-      cp ./plugin.json ${{targets.destdir}}/usr/src/app/
-
-      # These prebuilt binaries depend on shlibs that we don't ship/support.
-      rm -rf "${{targets.destdir}}"/usr/src/app/node_modules/bare-fs/prebuilds/android-* \
-        "${{targets.destdir}}"/usr/src/app/node_modules/bare-fs/prebuilds/darwin-* \
-        "${{targets.destdir}}"/usr/src/app/node_modules/bare-fs/prebuilds/ios-* \
-        "${{targets.destdir}}"/usr/src/app/node_modules/bare-fs/prebuilds/win32-* \
-        "${{targets.destdir}}"/usr/src/app/node_modules/bare-os/prebuilds/android-* \
-        "${{targets.destdir}}"/usr/src/app/node_modules/bare-os/prebuilds/darwin-* \
-        "${{targets.destdir}}"/usr/src/app/node_modules/bare-os/prebuilds/ios-* \
-        "${{targets.destdir}}"/usr/src/app/node_modules/bare-os/prebuilds/win32-*
+      packages: ./
+      output: grafana-image-renderer
 
 update:
   enabled: true
@@ -76,10 +37,9 @@ update:
 test:
   pipeline:
     - name: "start app"
-      working-directory: /usr/src/app
       uses: test/daemon-check-output
       with:
-        start: "dumb-init -- node build/app.js server --config=config.json"
+        start: "dumb-init -- grafana-image-renderer server"
         timeout: 5
         expected_output: |
-          {"level":"info","message":"HTTP Server started, listening at http://localhost:8081"}
+          msg="serving HTTP traffic" addr=:8081