chore(deps): upgrade nextra to 3.3.1 to remove vulnerable next-mdx-remote

.github/actions/base-setup/action.yaml

@@ -4,7 +4,7 @@ runs:
   using: "composite"
   steps:
     - name: Setup pnpm
-      uses: pnpm/action-setup@v2
+      uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
       with:
         run_install: false
 
@@ -25,7 +25,13 @@ runs:
         path: |
           ${{ steps.pnpm-cache.outputs.STORE_PATH }}
           **/node_modules
-        key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+        key: ${{ runner.os }}-pnpm-store-v2-${{ hashFiles('**/pnpm-lock.yaml') }}
         restore-keys: |
-          ${{ runner.os }}-pnpm-store-
+          ${{ runner.os }}-pnpm-store-v2-
+
+    # Always reconcile node_modules with the lockfile: a restore-keys fallback
+    # can hand us modules from an older lockfile, which pnpm repairs quickly here.
+    - name: Install dependencies
+      shell: bash
+      run: pnpm install --frozen-lockfile
 

.github/workflows/cicd.yaml

@@ -16,28 +16,31 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: volta-cli/action@v4
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v4.4.0
         with:
           run_install: false
       - uses: actions/setup-node@v4
         with:
           node-version: "22.x"
           cache: "pnpm"
-      - name: Install dependencies
-        run: pnpm install --frozen-lockfile
       - name: Add pnpm store path to env var
         id: pnpm-cache
         shell: bash
         run: echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+      # Restore the cache BEFORE installing: restoring afterwards can extract a
+      # stale node_modules (via restore-keys) on top of a fresh install and then
+      # save that poisoned state under the new lockfile's cache key.
       - name: Cache node modules
         uses: actions/cache@v4
         with:
           path: |
             ${{ steps.pnpm-cache.outputs.STORE_PATH }}
             **/node_modules
-          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+          key: ${{ runner.os }}-pnpm-store-v2-${{ hashFiles('**/pnpm-lock.yaml') }}
           restore-keys: |
-            ${{ runner.os }}-pnpm-store-
+            ${{ runner.os }}-pnpm-store-v2-
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
 
   js-lint:
     needs: install_modules

next.config.mjs

@@ -18,6 +18,9 @@ const config = withNextra({
   eslint: {
     ignoreDuringBuilds: true,
   },
+  // Keep plain .ts out of pageExtensions so Next 15's route-export validation
+  // doesn't treat Nextra's _meta.ts files as pages (Nextra discovers them itself).
+  pageExtensions: ["tsx"],
   images: {
     unoptimized: true,
   },

package.json

@@ -55,8 +55,8 @@
     "next": "15.5.24",
     "next-sitemap": "4.2.3",
     "next-themes": "0.4.6",
-    "nextra": "2.13.4",
-    "nextra-theme-docs": "2.13.4",
+    "nextra": "3.3.1",
+    "nextra-theme-docs": "3.3.1",
     "react": "18.3.1",
     "react-dom": "18.3.1"
   },

src/components/Head.tsx

@@ -3,10 +3,14 @@ import { useConfig } from "nextra-theme-docs";
 
 export const Head = () => {
   const { asPath, defaultLocale, locale } = useRouter();
-  const { frontMatter } = useConfig();
+  const { frontMatter, title: pageTitle } = useConfig();
   const baseUrl = "https://docs.inkonchain.com";
   const url =
     baseUrl + (defaultLocale === locale ? asPath : `/${locale}${asPath}`);
+  const documentTitle =
+    asPath === "/"
+      ? "Ink Docs - The Official Developer Guide for Ink"
+      : `${pageTitle} | Ink Docs`;
   const title =
     frontMatter.title || "Ink Docs - The Official Developer Guide for Ink";
   const description =
@@ -16,6 +20,8 @@ export const Head = () => {
 
   return (
     <>
+      <title>{documentTitle}</title>
+
       {/* Basic Meta Tags */}
       <meta name="title" content={title} />
       <meta name="description" content={description} />

src/components/Toc.tsx

@@ -1,20 +1,16 @@
 import Link from "next/link";
+import type { Heading } from "nextra";
 
 import { PencilIcon } from "@/icons/Pencil";
 import { ThumbUpIcon } from "@/icons/ThumbUp";
 import { URLS } from "@/utils/urls";
 
-interface Heading {
-  id: string;
-  depth: number;
-  value: string;
-}
-
 interface TocProps {
-  headings: Heading[];
+  toc: Heading[];
+  filePath: string;
 }
 
-export const Toc: React.FC<TocProps> = ({ headings }) => {
+export const Toc: React.FC<TocProps> = ({ toc: headings }) => {
   return (
     <div className="flex flex-col items-start justify-start py-5 sticky top-14">
       {headings.length > 0 && (

src/globals.css

@@ -55,7 +55,6 @@
 
   /* We need to override the underline for nav links and sidebar items */
   nav > a,
-  a:has(div.ink-sidebar-item),
   .toc-link {
     @apply no-underline;
   }
@@ -66,12 +65,6 @@
   display: none !important ;
 }
 
-/* Remove the padding from the sidebar link, so that we can pply our own style */
-a:has(div.ink-sidebar-item) {
-  padding: 0 !important;
-  background-color: transparent !important;
-}
-
 /* Target both the banner container and its text */
 .nextra-banner-container {
   @apply text-white !important;

src/pages/500.mdx

@@ -1,11 +1,5 @@
 # Unexpected Error
 
-![500 Error Warning.](/img/icons/500-page.svg)
-
 ## Something isn't quite right. Let's start again on the [homepage](index).
 
 #### Please help by [submitting an issue](https://github.com/inkonchain/docs/issues/new) for the broken link. ❤️
-
-# CHANGE
-
-\n

src/pages/_app.mdx → src/pages/_app.tsx

@@ -1,12 +1,15 @@
-import { ThemeProvider } from "next-themes";
+import type { AppProps } from "next/app";
 import Script from "next/script";
+import { ThemeProvider } from "next-themes";
+
 import { inter, plus_jakarta_sans } from "../fonts";
+
 import "../globals.css";
 
-export default function App({ Component, pageProps }) {
+export default function App({ Component, pageProps }: AppProps) {
   return (
     <ThemeProvider attribute="class">
       <Script
         id="schema-markup"
         type="application/ld+json"
         strategy="beforeInteractive"