bump version

* don't run in chrome sandbox, as it requres permissions docker does
* not have