turborepo/examples/with-tailwind
vercel[bot] d29bb06cd4
fix: React Server Components CVE vulnerabilities (#11245)
> [!IMPORTANT]
> This is an automatic PR generated by Vercel to help you patch known
vulnerabilities related to CVE-2025-55182 (React2Shell), CVE-2025-55183,
CVE-2025-55184, and CVE-2025-67779. We can't guarantee the PR is
comprehensive, and it may contain mistakes.

Not all projects are affected by all issues, but **patched versions are
required to ensure full remediation**.

Vercel has deployed WAF mitigations globally to help protect your
application, but upgrading remains required for complete protection.

This automated pull request updates your React, Next.js, and related
Server Components packages to versions that fix **all currently known
React Server Components vulnerabilities**, including the two newly
discovered issues.

See our [Security Bulletins](https://vercel.com/kb/bulletin/) for more
information and reach out to security@vercel.com with any questions.

Fixes VULN-3312

---------

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Anthony Shew <anthonyshew@gmail.com>
2025-12-12 07:19:57 -07:00
..
apps fix: React Server Components CVE vulnerabilities (#11245) 2025-12-12 07:19:57 -07:00
packages examples(fix): Gradient in with-tailwind (#11073) 2025-11-10 15:44:25 +00:00
.gitignore fix(examples) tailwind - ignore ui dist/ (#3494) 2023-01-26 09:12:21 -05:00
.npmrc feat(examples): use pnpm by default (#2820) 2022-11-23 12:07:25 -05:00
meta.json docs: enhance examples tables (#10173) 2025-03-17 12:39:17 -06:00
package.json examples: Bump turbo to latest (#11100) 2025-11-10 23:48:45 -07:00
pnpm-lock.yaml fix: React Server Components CVE vulnerabilities (#11245) 2025-12-12 07:19:57 -07:00
pnpm-workspace.yaml feat(examples): use pnpm by default (#2820) 2022-11-23 12:07:25 -05:00
README.md docs: update README.md in examples with-tailwind to correctly reference .ts config files instead of .js (#10057) 2025-02-28 15:46:33 +00:00
turbo.json docs: migrate to turborepo.com (#10368) 2025-04-23 10:39:37 -06:00

Turborepo Tailwind CSS starter

This Turborepo starter is maintained by the Turborepo core team.

Using this example

Run the following command:

npx create-turbo@latest -e with-tailwind

What's inside?

This Turborepo includes the following packages/apps:

Apps and Packages

  • docs: a Next.js app with Tailwind CSS
  • web: another Next.js app with Tailwind CSS
  • ui: a stub React component library with Tailwind CSS shared by both web and docs applications
  • @repo/eslint-config: eslint configurations (includes eslint-config-next and eslint-config-prettier)
  • @repo/typescript-config: tsconfig.jsons used throughout the monorepo

Each package/app is 100% TypeScript.

Building packages/ui

This example is set up to produce compiled styles for ui components into the dist directory. The component .tsx files are consumed by the Next.js apps directly using transpilePackages in next.config.ts. This was chosen for several reasons:

  • Make sharing one tailwind.config.ts to apps and packages as easy as possible.
  • Make package compilation simple by only depending on the Next.js Compiler and tailwindcss.
  • Ensure Tailwind classes do not overwrite each other. The ui package uses a ui- prefix for it's classes.
  • Maintain clear package export boundaries.

Another option is to consume packages/ui directly from source without building. If using this option, you will need to update the tailwind.config.ts in your apps to be aware of your package locations, so it can find all usages of the tailwindcss class names for CSS compilation.

For example, in tailwind.config.ts:

  content: [
    // app content
    `src/**/*.{js,ts,jsx,tsx}`,
    // include packages if not transpiling
    "../../packages/ui/*.{js,ts,jsx,tsx}",
  ],

If you choose this strategy, you can remove the tailwindcss and autoprefixer dependencies from the ui package.

Utilities

This Turborepo has some additional tools already setup for you: