> [!IMPORTANT] > This is an automatic PR generated by Vercel to help you patch known vulnerabilities related to CVE-2025-55182 (React2Shell), CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779. We can't guarantee the PR is comprehensive, and it may contain mistakes. Not all projects are affected by all issues, but **patched versions are required to ensure full remediation**. Vercel has deployed WAF mitigations globally to help protect your application, but upgrading remains required for complete protection. This automated pull request updates your React, Next.js, and related Server Components packages to versions that fix **all currently known React Server Components vulnerabilities**, including the two newly discovered issues. See our [Security Bulletins](https://vercel.com/kb/bulletin/) for more information and reach out to security@vercel.com with any questions. Fixes VULN-3312 --------- Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com> Co-authored-by: Anthony Shew <anthonyshew@gmail.com> |
||
|---|---|---|
| .. | ||
| apps | ||
| packages | ||
| .dockerignore | ||
| .gitignore | ||
| docker-compose.yml | ||
| meta.json | ||
| package.json | ||
| README.md | ||
| turbo.json | ||
| yarn.lock | ||
Turborepo Docker starter
This is a community-maintained example. If you experience a problem, please submit a pull request with a fix. GitHub Issues will be closed.
Using this example
Run the following command:
npx create-turbo@latest -e with-docker
What's inside?
This Turborepo includes the following:
Apps and Packages
web: a Next.js appapi: an Express server@repo/ui: a React component library@repo/logger: Isomorphic logger (a small wrapper around console.log)@repo/eslint-config: ESLint presets@repo/typescript-config: tsconfig.json's used throughout the monorepo@repo/jest-presets: Jest configurations
Each package/app is 100% TypeScript.
Docker
This repo is configured to be built with Docker, and Docker compose. To build all apps in this repo:
# Install dependencies
yarn install
# Create a network, which allows containers to communicate
# with each other, by using their container name as a hostname
docker network create app_network
# Build prod using new BuildKit engine
COMPOSE_DOCKER_CLI_BUILD=1 DOCKER_BUILDKIT=1 docker-compose -f docker-compose.yml build
# Start prod in detached mode
docker-compose -f docker-compose.yml up -d
Open http://localhost:3000.
To shutdown all running containers:
# Stop running containers started by docker-compse
docker-compose -f docker-compose.yml down
Remote Caching
Tip
Vercel Remote Cache is free for all plans. Get started today at vercel.com.
This example includes optional remote caching. In the Dockerfiles of the apps, uncomment the build arguments for TURBO_TEAM and TURBO_TOKEN. Then, pass these build arguments to your Docker build.
You can test this behavior using a command like:
docker build -f apps/web/Dockerfile . --build-arg TURBO_TEAM=“your-team-name” --build-arg TURBO_TOKEN=“your-token“ --no-cache
Utilities
This Turborepo has some additional tools already setup for you:
- TypeScript for static type checking
- ESLint for code linting
- Jest test runner for all things JavaScript
- Prettier for code formatting