Enhance Playwright integration: add --no-sandbox and --disable-setuid-sandbox arguments for Linux CI compatibility

Author: CSSFrancis

.github/workflows/docs.yml

@@ -39,12 +39,16 @@ jobs:
 
       # ── Dependencies ───────────────────────────────────────────────────────
       # Install the package itself plus the [docs] optional-dependency group
-      # (sphinx, pydata-sphinx-theme, sphinx-gallery, pillow).
-      # sphinx-gallery transitively brings in matplotlib, which the custom
-      # scraper (docs/_sg_html_scraper.py) needs to render thumbnails.
+      # (sphinx, pydata-sphinx-theme, sphinx-gallery, pillow, playwright).
       - name: Install dependencies (with docs extras)
         run: uv sync --extra docs
 
+      # Playwright ships the Python bindings but NOT the browser binaries.
+      # --with-deps also installs the OS-level shared libraries Chromium needs
+      # (libglib2, libnss3, etc.) on bare Ubuntu runners.
+      - name: Install Playwright browser
+        run: uv run playwright install chromium --with-deps
+
       # ── Determine deployment target ─────────────────────────────────────────
       # Release tag  (refs/tags/v1.2.3) → destination = "v1.2.3"
       # Everything else (push to main, manual dispatch) → destination = "dev"

docs/_sg_html_scraper.py

@@ -79,7 +79,11 @@ def _make_thumbnail_png(widget) -> bytes:
 
     try:
         with sync_playwright() as pw:
-            browser = pw.chromium.launch(headless=True)
+            # --no-sandbox is required on Linux CI runners (GitHub Actions,
+            # etc.) where the kernel user-namespace sandbox is not available.
+            browser = pw.chromium.launch(
+                headless=True, args=["--no-sandbox", "--disable-setuid-sandbox"]
+            )
             try:
                 page = browser.new_page()
                 # Set OS-level dark preference so every media query agrees.