Skip to content

merge various changes from fork#4815

Open
martin-mfg wants to merge 33 commits intoanuraghazra:masterfrom
stats-organization:merge-into-upstream
Open

merge various changes from fork#4815
martin-mfg wants to merge 33 commits intoanuraghazra:masterfrom
stats-organization:merge-into-upstream

Conversation

@martin-mfg
Copy link
Copy Markdown
Contributor

@martin-mfg martin-mfg commented Feb 24, 2026 •
edited
Loading

Merge changes from https://github.com/stats-organization/github-readme-stats:

  • docs: fix anchor links
  • docs: ensure example cards render correctly
  • docs: add optional instructions to mark PAT env vars as sensitive
  • langs card: add progress bar background color parameter
  • fix error on invalid theme name
  • several dependency upgrades
  • update languageColors.json

Especially for the anchor links and invalid themes several people have created issues and PRs in https://github.com/anuraghazra/github-readme-stats.

rickstaa and others added 30 commits December 27, 2025 18:39
@rickstaa @UlyssesZh
@Zo-Bro-23 @qwerty541
docs: add github action as recommended usage method (#3)
9f48dc8 
Add new github action as recommended usage method now that we are no
longer sponsored by vercel and the hosted endpoint is not available
anymore.

Co-authored-by: Ulysses Zhan <UlyssesZhan@gmail.com>
Co-authored-by: Zohan Subhash <zohan.subhash@gmail.com>
Co-authored-by: Alexandr <qwerty541zxc@gmail.com>
@rickstaa
docs: ensure example cards render correctly (#4)
9db9973 
Use my deployed environment so example cards render properly and are not
rate-limited by the public instance.
@martin-mfg
fix docs links, prepare workflows, update action example
5c4c3fc
@martin-mfg
fix formatting
91c395b
@martin-mfg
docs(theme): auto update theme readme (#5)
d91e399 
Co-authored-by: GitHub Readme Stats Bot <no-reply@githubreadmestats.com>
@dependabot
ci(deps): Bump stefanzweifel/git-auto-commit-action from 7.0.0 to 7.1…
d11e642 
….0 (#6)

Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases)
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md)
- [Commits](stefanzweifel/git-auto-commit-action@28e16e8...04702ed)

---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
ci(deps): Bump actions/setup-node from 6.1.0 to 6.2.0 (#7)
4334b27 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@395ad32...6044e13)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump prettier from 3.7.4 to 3.8.0 (#13)
72ce632 
Bumps [prettier](https://github.com/prettier/prettier) from 3.7.4 to 3.8.0.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.7.4...3.8.0)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.1 (#12)
3f94e39 
Bumps [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) from 61.5.0 to 62.0.1.
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v61.5.0...v62.0.1)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump globals from 16.5.0 to 17.0.0 (#9)
852948d 
Bumps [globals](https://github.com/sindresorhus/globals) from 16.5.0 to 17.0.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v16.5.0...v17.0.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@JoeyC-Dev
docs: add instructions to make PAT environment variable sensitive in …
573c2d4 
…Vercel deployment (#14)

Added instructions for setting environment variables securely.

Signed-off-by: Joey Chen <142381267+JoeyC-Dev@users.noreply.github.com>
@martin-mfg
Merge branch 'master' into next
17e6aee
@martin-mfg @mikyll
Fix default theme fallback when an invalid theme is passed (#15)
b654eaa 
* fix(color): invalid theme fallback to default

Fixes: anuraghazra#4641

* test(color): add test case for invalid theme fallback to default

* style(color): add back the tab space

* test(color): fix color default theme

* fix(color): use 'in' instead of '.hasOwnProperty'

* fix new test

* format code

---------

Co-authored-by: mikyll <righi.michy@gmail.com>
@martin-mfg @a-s-t-e-y-a
feature(top langs card): add ability to change progress bar backgroun…
0b05179 
…d color in normal layout (#16)

* anuraghazra#3307 enhancement : prog_bg_color query added to change the background of progress bar

* anuraghazra#3066 bug Fixed : readme.md file as stated

* anuraghazra#3066 bug Fixed : readme.md file as stated"

* anuraghazra#3066 bug Fixed : readme.md file as stated

* fix types.d.ts

* add test

---------

Co-authored-by: krishnoit <krishnoit100@gmail.com>
Co-authored-by: krishna seth <75961965+a-s-t-e-y-a@users.noreply.github.com>
@martin-mfg
allow triggering workflows manually (#17)
9dc2a8a
@github-actions @martin-mfg
refactor: update languages JSON (#18)
c4fbc79 
Co-authored-by: martin-mfg <2026226+martin-mfg@users.noreply.github.com>
@dependabot
ci(deps): Bump actions/checkout from 6.0.1 to 6.0.2 (#19)
1823e9f 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@8e8c483...de0fac2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump prettier from 3.8.0 to 3.8.1 (#22)
2bbab30 
Bumps [prettier](https://github.com/prettier/prettier) from 3.8.0 to 3.8.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.0...3.8.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump globals from 17.0.0 to 17.1.0 (#23)
2accfd0 
Bumps [globals](https://github.com/sindresorhus/globals) from 17.0.0 to 17.1.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.0.0...v17.1.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
ci(deps): Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#21)
978f4d8 
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.0.0 to 8.1.0.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@98357b1...c0f553f)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump eslint-plugin-jsdoc from 62.0.1 to 62.4.0 (#20)
5644b32 
Bumps [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) from 62.0.1 to 62.4.0.
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.0.1...v62.4.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump globals from 17.1.0 to 17.2.0 (#27)
4d96707 
Bumps [globals](https://github.com/sindresorhus/globals) from 17.1.0 to 17.2.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.1.0...v17.2.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): Bump axios from 1.13.2 to 1.13.4 (#26)
0b44163 
Bumps [axios](https://github.com/axios/axios) from 1.13.2 to 1.13.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.2...v1.13.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump eslint-plugin-jsdoc from 62.4.1 to 62.5.0 (#28)
e798ab3 
Bumps [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) from 62.4.1 to 62.5.0.
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.4.1...v62.5.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump @actions/github from 6.0.1 to 9.0.0 (#24)
1b40d81 
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 6.0.1 to 9.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-version: 9.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump @actions/core from 2.0.1 to 3.0.0 (#25)
a8aeac2 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.1 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump globals from 17.2.0 to 17.3.0 (#33)
2992361 
Bumps [globals](https://github.com/sindresorhus/globals) from 17.2.0 to 17.3.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.2.0...v17.3.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): Bump dotenv from 17.2.3 to 17.2.4 (#32)
4e12d15 
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.2.3 to 17.2.4.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/commits)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps-dev): Bump eslint-plugin-jsdoc from 62.5.0 to 62.5.3 (#29)
1ba8beb 
Bumps [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) from 62.5.0 to 62.5.3.
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.5.0...v62.5.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): Bump axios from 1.13.4 to 1.13.5 (#34)
e474cb3 
Bumps [axios](https://github.com/axios/axios) from 1.13.4 to 1.13.5.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.4...v1.13.5)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@vercel
Copy link
Copy Markdown

vercel bot commented Feb 24, 2026

@martin-mfg is attempting to deploy a commit to the github readme stats Team on Vercel.

A member of the Team first needs to authorize it.

@github-actions github-actions bot added documentation Improvements or additions to documentation. lang-card Issues related to the language card. ci CI related features. dependencies Pull requests that update a dependency file labels Feb 24, 2026
@martin-mfg martin-mfg marked this pull request as draft February 24, 2026 10:11
@martin-mfg
Copy link
Copy Markdown
Contributor Author

martin-mfg commented Feb 24, 2026

Regarding the failing CodeQL pipeline I am not sure why the pipeline runs only for this PR. I fixed the Reflected cross-site scripting vulnerability in the new progress bar background color parameter. Apart from this I think the reported problems are not introduced in this PR and/or are probably false positives.

@martin-mfg martin-mfg marked this pull request as ready for review February 24, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@qwerty541 qwerty541 Awaiting requested review from qwerty541 qwerty541 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

ci CI related features. dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation. lang-card Issues related to the language card.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@martin-mfg @rickstaa @JoeyC-Dev