turborepo/examples/with-docker
vercel[bot] d29bb06cd4
fix: React Server Components CVE vulnerabilities (#11245)
> [!IMPORTANT]
> This is an automatic PR generated by Vercel to help you patch known
vulnerabilities related to CVE-2025-55182 (React2Shell), CVE-2025-55183,
CVE-2025-55184, and CVE-2025-67779. We can't guarantee the PR is
comprehensive, and it may contain mistakes.

Not all projects are affected by all issues, but **patched versions are
required to ensure full remediation**.

Vercel has deployed WAF mitigations globally to help protect your
application, but upgrading remains required for complete protection.

This automated pull request updates your React, Next.js, and related
Server Components packages to versions that fix **all currently known
React Server Components vulnerabilities**, including the two newly
discovered issues.

See our [Security Bulletins](https://vercel.com/kb/bulletin/) for more
information and reach out to security@vercel.com with any questions.

Fixes VULN-3312

---------

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Anthony Shew <anthonyshew@gmail.com>
2025-12-12 07:19:57 -07:00
..
apps fix: React Server Components CVE vulnerabilities (#11245) 2025-12-12 07:19:57 -07:00
packages fix(example/with-docker): jest can’t resolve @repo/jest-presets/node (#10551) 2025-06-09 18:02:38 +00:00
.dockerignore fix(examples): ignore node_modules in docker (#3301) 2023-01-12 20:09:02 -05:00
.gitignore feat(examples): add docker (#1522) 2022-07-14 20:21:15 +00:00
docker-compose.yml feat(examples): add docker (#1522) 2022-07-14 20:21:15 +00:00
meta.json docs: enhance examples tables (#10173) 2025-03-17 12:39:17 -06:00
package.json examples: Bump turbo to latest (#11100) 2025-11-10 23:48:45 -07:00
README.md fix(examples): change docker command (#10362) 2025-04-22 06:48:00 -06:00
turbo.json docs: migrate to turborepo.com (#10368) 2025-04-23 10:39:37 -06:00
yarn.lock fix: React Server Components CVE vulnerabilities (#11245) 2025-12-12 07:19:57 -07:00

Turborepo Docker starter

This is a community-maintained example. If you experience a problem, please submit a pull request with a fix. GitHub Issues will be closed.

Using this example

Run the following command:

npx create-turbo@latest -e with-docker

What's inside?

This Turborepo includes the following:

Apps and Packages

  • web: a Next.js app
  • api: an Express server
  • @repo/ui: a React component library
  • @repo/logger: Isomorphic logger (a small wrapper around console.log)
  • @repo/eslint-config: ESLint presets
  • @repo/typescript-config: tsconfig.json's used throughout the monorepo
  • @repo/jest-presets: Jest configurations

Each package/app is 100% TypeScript.

Docker

This repo is configured to be built with Docker, and Docker compose. To build all apps in this repo:

# Install dependencies
yarn install

# Create a network, which allows containers to communicate
# with each other, by using their container name as a hostname
docker network create app_network

# Build prod using new BuildKit engine
COMPOSE_DOCKER_CLI_BUILD=1 DOCKER_BUILDKIT=1 docker-compose -f docker-compose.yml build

# Start prod in detached mode
docker-compose -f docker-compose.yml up -d

Open http://localhost:3000.

To shutdown all running containers:

# Stop running containers started by docker-compse
 docker-compose -f docker-compose.yml down

Remote Caching

Tip

Vercel Remote Cache is free for all plans. Get started today at vercel.com.

This example includes optional remote caching. In the Dockerfiles of the apps, uncomment the build arguments for TURBO_TEAM and TURBO_TOKEN. Then, pass these build arguments to your Docker build.

You can test this behavior using a command like:

docker build -f apps/web/Dockerfile . --build-arg TURBO_TEAM=“your-team-name” --build-arg TURBO_TOKEN=“your-token“ --no-cache

Utilities

This Turborepo has some additional tools already setup for you: