turborepo/examples/basic
vercel[bot] d29bb06cd4
fix: React Server Components CVE vulnerabilities (#11245)
> [!IMPORTANT]
> This is an automatic PR generated by Vercel to help you patch known
vulnerabilities related to CVE-2025-55182 (React2Shell), CVE-2025-55183,
CVE-2025-55184, and CVE-2025-67779. We can't guarantee the PR is
comprehensive, and it may contain mistakes.

Not all projects are affected by all issues, but **patched versions are
required to ensure full remediation**.

Vercel has deployed WAF mitigations globally to help protect your
application, but upgrading remains required for complete protection.

This automated pull request updates your React, Next.js, and related
Server Components packages to versions that fix **all currently known
React Server Components vulnerabilities**, including the two newly
discovered issues.

See our [Security Bulletins](https://vercel.com/kb/bulletin/) for more
information and reach out to security@vercel.com with any questions.

Fixes VULN-3312

---------

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Anthony Shew <anthonyshew@gmail.com>
2025-12-12 07:19:57 -07:00
..
apps fix: React Server Components CVE vulnerabilities (#11245) 2025-12-12 07:19:57 -07:00
packages examples(dev-deps): bump the basic group in /examples/basic with 2 updates (#11218) 2025-12-08 12:15:52 -07:00
.gitignore Re-up create-turbo. (#6439) 2023-11-20 12:09:07 -07:00
.npmrc Update with-gatsby example. (#6570) 2023-11-27 16:25:03 -07:00
meta.json docs: enhance examples tables (#10173) 2025-03-17 12:39:17 -06:00
package.json examples(dev-deps): bump the basic group in /examples/basic with 2 updates (#11218) 2025-12-08 12:15:52 -07:00
pnpm-lock.yaml fix: React Server Components CVE vulnerabilities (#11245) 2025-12-12 07:19:57 -07:00
pnpm-workspace.yaml feat(examples): use pnpm by default (#2820) 2022-11-23 12:07:25 -05:00
README.md docs(example): use npx turbo and show filtering (#10500) 2025-06-21 15:55:16 +00:00
turbo.json docs: migrate to turborepo.com (#10368) 2025-04-23 10:39:37 -06:00

Turborepo starter

This Turborepo starter is maintained by the Turborepo core team.

Using this example

Run the following command:

npx create-turbo@latest

What's inside?

This Turborepo includes the following packages/apps:

Apps and Packages

  • docs: a Next.js app
  • web: another Next.js app
  • @repo/ui: a stub React component library shared by both web and docs applications
  • @repo/eslint-config: eslint configurations (includes eslint-config-next and eslint-config-prettier)
  • @repo/typescript-config: tsconfig.jsons used throughout the monorepo

Each package/app is 100% TypeScript.

Utilities

This Turborepo has some additional tools already setup for you:

Build

To build all apps and packages, run the following command:

cd my-turborepo

# With [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation) installed (recommended)
turbo build

# Without [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation), use your package manager
npx turbo build
yarn dlx turbo build
pnpm exec turbo build

You can build a specific package by using a filter:

# With [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation) installed (recommended)
turbo build --filter=docs

# Without [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation), use your package manager
npx turbo build --filter=docs
yarn exec turbo build --filter=docs
pnpm exec turbo build --filter=docs

Develop

To develop all apps and packages, run the following command:

cd my-turborepo

# With [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation) installed (recommended)
turbo dev

# Without [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation), use your package manager
npx turbo dev
yarn exec turbo dev
pnpm exec turbo dev

You can develop a specific package by using a filter:

# With [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation) installed (recommended)
turbo dev --filter=web

# Without [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation), use your package manager
npx turbo dev --filter=web
yarn exec turbo dev --filter=web
pnpm exec turbo dev --filter=web

Remote Caching

Tip

Vercel Remote Cache is free for all plans. Get started today at vercel.com.

Turborepo can use a technique known as Remote Caching to share cache artifacts across machines, enabling you to share build caches with your team and CI/CD pipelines.

By default, Turborepo will cache locally. To enable Remote Caching you will need an account with Vercel. If you don't have an account you can create one, then enter the following commands:

cd my-turborepo

# With [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation) installed (recommended)
turbo login

# Without [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation), use your package manager
npx turbo login
yarn exec turbo login
pnpm exec turbo login

This will authenticate the Turborepo CLI with your Vercel account.

Next, you can link your Turborepo to your Remote Cache by running the following command from the root of your Turborepo:

# With [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation) installed (recommended)
turbo link

# Without [global `turbo`](https://turborepo.com/docs/getting-started/installation#global-installation), use your package manager
npx turbo link
yarn exec turbo link
pnpm exec turbo link

Learn more about the power of Turborepo: