feat: add changelog page powered by Notra

[mezotv]

Description

• Add changelog page with split-view layout (sticky left sidebar, scrollable right content) similar to cursor and better-auth
• Integrate Notra API for fetching changelog posts
• Add 'Powered by Notra' badge with SVG logo linking to usenotra.com
• Add changelog links to main and docs navbars
• Fix JSX attribute casing in icon components (clipRule, fillRule)
• Bump Next.js to ^16.1.6

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes

[vercel]

@mezotv is attempting to deploy a commit to the Databuddy OSS Team on Vercel.

A member of the Team first needs to authorize it.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 29f124bb-55a3-4943-b7b4-95fed47b04e8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

📝 Coding Plan

• Generate coding plan for human review comments

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[greptile-apps]

Greptile Summary

This PR adds a new /changelog page to the docs app powered by the Notra CMS API, featuring a sticky split-view layout (left sidebar for date/title, scrollable right column for content). It also adds changelog links to both navbars, updates sitemap entries, documents new env vars, fixes JSX attribute casing in several icon components, and bumps Next.js to ^16.1.6.

Key findings:

• Incomplete JSX attribute casing fix: The PR fixes clip-rule → clipRule in hipaa.tsx and iso27001.tsx, but leaves fill-rule unconverted to fillRule on 4 attributes across those two files — the same category of bug this PR set out to fix.
• splitChangelogContent only matches bare <h2>: html.indexOf("<h2>") will miss <h2 class="..."> or <h2 id="..."> tags, silently causing all content to be classified as description with an empty body.
• externalizeLinks regex is too narrow: Only externalizes links where href is the first attribute immediately after <a ; links like <a class="x" href="..."> are silently skipped.
• Minor: The "Powered by Notra" badge link uses rel="noopener" without noreferrer.

Confidence Score: 3/5

• Safe to merge with fixes — the two logic bugs in changelog-utils and the remaining fill-rule attributes should be addressed before shipping.
• The core feature (Notra integration, page layout, nav links, sitemap) is well-structured with proper error handling and ISR. However, two logic bugs in the utility helpers (splitChangelogContent and externalizeLinks) could cause incorrect rendering of changelog content, and the JSX casing fix is incomplete across two icon files, which was explicitly part of this PR's scope.
• apps/docs/lib/changelog-utils.ts (two logic bugs), apps/docs/components/icons/hipaa.tsx and apps/docs/components/icons/iso27001.tsx (remaining fill-rule attributes).

Important Files Changed

Filename	Overview
apps/docs/app/(home)/changelog/page.tsx	New changelog page with split-view layout; renders Notra API HTML via dangerouslySetInnerHTML through the Prose component — content is trusted CMS output but unsanitized. Missing noreferrer on the badge link.
apps/docs/lib/changelog-query.ts	Clean Notra API client with graceful error handling, env-var guards, and React cache for deduplication. The exported getChangelogPost is currently unused but benign.
apps/docs/lib/changelog-utils.ts	Two bugs: splitChangelogContent uses an exact <h2> match that misses tags with attributes, silently rendering all content as description; externalizeLinks regex only externalizes links where href is the first attribute.
apps/docs/components/icons/hipaa.tsx	Partially fixed: clipRule was updated correctly but fill-rule on line 18 was left as an HTML attribute instead of camelCase fillRule, triggering a React DOM warning.
apps/docs/components/icons/iso27001.tsx	Same incomplete fix as hipaa.tsx: three fill-rule attributes at lines 18, 28, and 38 remain unconverted to fillRule.
apps/docs/lib/sitemap-generator.ts	/changelog correctly added with priority 0.7 and weekly change frequency matching the expected update cadence.
.env.example	NOTRA_API_KEY and NOTRA_ORGANIZATION_ID correctly documented as optional; clear comment explains they're only needed for changelog functionality.

Sequence Diagram

sequenceDiagram
    participant Browser
    participant ChangelogPage as ChangelogPage (SSR)
    participant Cache as React cache()
    participant NotraAPI as Notra API

    Browser->>ChangelogPage: GET /changelog
    ChangelogPage->>Cache: getChangelogs()
    Cache->>NotraAPI: GET /v1/{orgId}/posts?status=published&sort=desc
    alt API key / org ID missing
        NotraAPI-->>Cache: (skipped — env var guard)
        Cache-->>ChangelogPage: FetchError { error: true }
    else HTTP error
        NotraAPI-->>Cache: non-2xx response
        Cache-->>ChangelogPage: FetchError { status, statusText }
    else Success
        NotraAPI-->>Cache: NotraPostListResponse { posts[], pagination }
        Cache-->>ChangelogPage: posts[]
    end
    ChangelogPage->>ChangelogPage: externalizeLinks(post.content)
    ChangelogPage->>ChangelogPage: splitChangelogContent(html)
    ChangelogPage->>ChangelogPage: formatChangelogDate(post.createdAt)
    ChangelogPage-->>Browser: Rendered HTML (revalidate: 3600s)

Loading

_{Last reviewed commit: 89111b3}

[greptile-apps]

Incomplete JSX attribute fix — fill-rule not updated

This PR fixed clip-rule → clipRule in the icon components, but the fill-rule attribute on the same <path> element was not converted to fillRule. In React/JSX, HTML attribute names must use camelCase; using fill-rule will trigger a React warning (Invalid DOM property 'fill-rule'. Did you mean 'fillRule'?) and the attribute may not be applied correctly in the rendered SVG.

The same issue also exists in apps/docs/components/icons/iso27001.tsx at lines 18, 28, and 38.

Suggested change

	fill-rule="evenodd"
	fillRule="evenodd"

[greptile-apps]

splitChangelogContent misses <h2> with attributes

html.indexOf("<h2>") performs an exact string match and will silently fail to split content when the API returns an <h2> tag that carries HTML attributes (e.g. <h2 class="..." id="...">). In that case h2Index is -1 and the entire post content is classified as description, leaving body empty — meaning the right-hand panel always shows "No additional details." for any post whose first section header has attributes.

A more robust approach is to use a case-insensitive pattern:

const h2Index = html.search(/<h2[\s>]/i);

This matches both <h2> and <h2 class="..."> regardless of casing.

[greptile-apps]

externalizeLinks regex skips links with leading attributes

The regex /<a\s+(href="[^"]*")/g only matches <a> tags where href is the very first attribute (with double-quote delimiters). Any link that has another attribute before href — e.g. <a class="..." href="https://..."> — will not receive a target="_blank" and will open in the same tab.

A more reliable approach would match the href attribute regardless of its position in the tag:

return html.replace(/<a\b([^>]*)>/gi, (match, attrs) => {
  if (/\btarget=/i.test(attrs)) return match;
  return `<a${attrs} target="_blank" rel="noopener noreferrer">`;
});

[greptile-apps]

Missing noreferrer on external badge link

The "Powered by Notra" link uses rel="noopener" but omits noreferrer. Without noreferrer, the browser sends a Referer header to usenotra.com revealing the origin URL, and (in older browsers) the opened window can still access window.opener. Best practice for target="_blank" links is rel="noopener noreferrer".

Suggested change

	rel="noopener"
	rel="noopener noreferrer"