Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
33 commits
Select commit Hold shift + click to select a range
9f48dc8
docs: add github action as recommended usage method (#3)
rickstaa Dec 27, 2025
9db9973
docs: ensure example cards render correctly (#4)
rickstaa Dec 27, 2025
5c4c3fc
fix docs links, prepare workflows, update action example
martin-mfg Jan 17, 2026
91c395b
fix formatting
martin-mfg Jan 17, 2026
d91e399
docs(theme): auto update theme readme (#5)
martin-mfg Jan 17, 2026
d11e642
ci(deps): Bump stefanzweifel/git-auto-commit-action from 7.0.0 to 7.1…
dependabot[bot] Jan 17, 2026
4334b27
ci(deps): Bump actions/setup-node from 6.1.0 to 6.2.0 (#7)
dependabot[bot] Jan 17, 2026
72ce632
build(deps-dev): Bump prettier from 3.7.4 to 3.8.0 (#13)
dependabot[bot] Jan 17, 2026
3f94e39
build(deps-dev): Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.1 (#12)
dependabot[bot] Jan 17, 2026
852948d
build(deps-dev): Bump globals from 16.5.0 to 17.0.0 (#9)
dependabot[bot] Jan 17, 2026
573c2d4
docs: add instructions to make PAT environment variable sensitive in …
JoeyC-Dev Jan 19, 2026
17e6aee
Merge branch 'master' into next
martin-mfg Jan 19, 2026
b654eaa
Fix default theme fallback when an invalid theme is passed (#15)
martin-mfg Jan 19, 2026
0b05179
feature(top langs card): add ability to change progress bar backgroun…
martin-mfg Jan 21, 2026
9dc2a8a
allow triggering workflows manually (#17)
martin-mfg Jan 24, 2026
c4fbc79
refactor: update languages JSON (#18)
github-actions[bot] Jan 24, 2026
1823e9f
ci(deps): Bump actions/checkout from 6.0.1 to 6.0.2 (#19)
dependabot[bot] Jan 24, 2026
2bbab30
build(deps-dev): Bump prettier from 3.8.0 to 3.8.1 (#22)
dependabot[bot] Jan 24, 2026
2accfd0
build(deps-dev): Bump globals from 17.0.0 to 17.1.0 (#23)
dependabot[bot] Jan 24, 2026
978f4d8
ci(deps): Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#21)
dependabot[bot] Jan 24, 2026
5644b32
build(deps-dev): Bump eslint-plugin-jsdoc from 62.0.1 to 62.4.0 (#20)
dependabot[bot] Jan 24, 2026
4d96707
build(deps-dev): Bump globals from 17.1.0 to 17.2.0 (#27)
dependabot[bot] Feb 3, 2026
0b44163
build(deps): Bump axios from 1.13.2 to 1.13.4 (#26)
dependabot[bot] Feb 3, 2026
e798ab3
build(deps-dev): Bump eslint-plugin-jsdoc from 62.4.1 to 62.5.0 (#28)
dependabot[bot] Feb 3, 2026
1b40d81
build(deps-dev): Bump @actions/github from 6.0.1 to 9.0.0 (#24)
dependabot[bot] Feb 3, 2026
a8aeac2
build(deps-dev): Bump @actions/core from 2.0.1 to 3.0.0 (#25)
dependabot[bot] Feb 3, 2026
2992361
build(deps-dev): Bump globals from 17.2.0 to 17.3.0 (#33)
dependabot[bot] Feb 8, 2026
4e12d15
build(deps): Bump dotenv from 17.2.3 to 17.2.4 (#32)
dependabot[bot] Feb 8, 2026
1ba8beb
build(deps-dev): Bump eslint-plugin-jsdoc from 62.5.0 to 62.5.3 (#29)
dependabot[bot] Feb 8, 2026
e474cb3
build(deps): Bump axios from 1.13.4 to 1.13.5 (#34)
dependabot[bot] Feb 17, 2026
6cbed7d
revert fork-specific changes
martin-mfg Feb 23, 2026
e3b5651
validate langs card progress bar background color (#39)
martin-mfg Feb 24, 2026
f96bfe0
Merge remote-tracking branch 'org/next' into merge-into-upstream
martin-mfg Feb 24, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/deploy-prep.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,10 @@ jobs:
if: github.repository == 'anuraghazra/github-readme-stats'
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Deployment Prep
run: python ./.github/workflows/deploy-prep.py
- uses: stefanzweifel/git-auto-commit-action@28e16e81777b558cc906c8750092100bbb34c5e3 # v7.0.0
- uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0
with:
branch: vercel
create_branch: true
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/e2e-test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,10 +22,10 @@ jobs:
node-version: [22.x]

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Setup Node
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
node-version: ${{ matrix.node-version }}
cache: npm
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/empty-issues-closer.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
runs-on: ubuntu-latest
steps:
# NOTE: Retrieve issue templates.
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Run empty issues closer action
uses: rickstaa/empty-issues-closer-action@e96914613221511279ca25f50fd4acc85e331d99 # v1.1.74
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/generate-theme-doc.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,10 +30,10 @@ jobs:
node-version: [22.x]

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Setup Node
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
node-version: ${{ matrix.node-version }}
cache: npm
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ossf-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:

steps:
- name: "Checkout code"
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
persist-credentials: false

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/preview-theme.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,10 +33,10 @@ jobs:
node-version: [22.x]

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Setup Node
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
node-version: ${{ matrix.node-version }}
cache: npm
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/stale-theme-pr-closer.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,10 +39,10 @@ jobs:
node-version: [22.x]

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Setup Node
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
node-version: ${{ matrix.node-version }}
cache: npm
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,10 +18,10 @@ jobs:
node-version: [22.x]

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Setup Node
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
node-version: ${{ matrix.node-version }}
cache: npm
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/theme-prs-closer.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out the code
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Set up Git
run: |
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/update-langs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -36,10 +36,10 @@ jobs:
node-version: [22.x]

steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

- name: Setup Node
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
with:
node-version: ${{ matrix.node-version }}
cache: npm
Expand All @@ -53,7 +53,7 @@ jobs:
run: npm run generate-langs-json

- name: Create Pull Request if upstream language file is changed
uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
with:
commit-message: "refactor: update languages JSON"
branch: "update_langs/patch"
Expand Down
2 changes: 2 additions & 0 deletions api/top-langs.js
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@
title_color,
text_color,
bg_color,
prog_bar_bg_color,
theme,
cache_seconds,
layout,
Expand Down Expand Up @@ -133,24 +134,25 @@

setCacheHeaders(res, cacheSeconds);

return res.send(
renderTopLanguages(topLangs, {
custom_title,
hide_title: parseBoolean(hide_title),
hide_border: parseBoolean(hide_border),
card_width: parseInt(card_width, 10),
hide: parseArray(hide),
title_color,
text_color,
bg_color,
prog_bar_bg_color,
theme,
layout,
langs_count,
border_radius,
border_color,
locale: locale ? locale.toLowerCase() : null,
disable_animations: parseBoolean(disable_animations),
hide_progress: parseBoolean(hide_progress),

Check failure

Code scanning / CodeQL

Reflected cross-site scripting High

Cross-site scripting vulnerability due to a
user-provided value
.
Cross-site scripting vulnerability due to a
user-provided value
.
Cross-site scripting vulnerability due to a
user-provided value
.
stats_format,
}),
);
Expand Down
Loading
Loading