Packages

@storybook/addon-a11y

10.6.5 · 27 Oct 2026MIT17.8M / weekRepositoryHomepagenpmAtom feed

Upgrading @storybook/addon-a11y From 8.2.5 to 8.6.19

50 releases in betweennotes for 10

Reading releases, release notes and advisories…

Other targets from 8.2.5Latest10.6.5
  1. 8.2.5yours
  2. 30 releases
  3. 8.6.0security
  4. 18 releases
  5. 8.6.19target
1+
change to make
0
advisories fixed
57+
new
99+
fixes

Counted from 10 of 50 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • deprecated8.5.0

Security

  • 🚨 Key security fixes for Vite and ESbuild

    8.6.0

Release by release

  1. 8.6.19

    12 Oct 20261 new · 1 fix
    • new

      Core: Add host validation warning and origin validation for MCP

    • fixed

      Highlight: Prevent menu items from emitting arbitrary channel events

  2. 8.6.1 – 8.6.1818 releases, no release note

  3. 8.6.0

    Security fix25 Feb 202510 new · 19 fixes
    • security

      🚨 Key security fixes for Vite and ESbuild

    • new

      Addon A11y: Introduce parameters.a11y.test

    • new

      Addon-Test: Add telemetry data for Focused Tests

    • new

      Angular: Support experimental zoneless mode

  4. 8.5.1 – 8.5.88 releases, no release note

  5. 8.5.0

    Deprecation15 Jan 202523 new · 33 fixes
    • deprecated

      Addon Themes: Deprecate useThemeParameters

    • new

      Addon A11y: Add conditional rendering for a11y violation number in Testing Module

    • new

      Addon A11y: Add typesVersions support for TypeScript definitions in a11y package

    • new

      Addon Test: Add @vitest/coverage-v8 during postinstall if no coverage reporter is installed

  6. 8.4.3 – 8.4.75 releases, no release note

  7. 8.4.2

    5 Nov 20243 fixes
    • fixed

      Addon Test: Fix post-install logic for Next.js Vite framework support

    • fixed

      CLI: Fix Solid init by installing @storybook/test

    • fixed

      Next.js: Fix bundled react and react-dom in monorepos

  8. 8.4.1no release note

180 other lines we could not sort, mostly version bumps

  • Channels: Restrict preview postMessage to known manager origins

    8.6.19

  • Core: Separate manager and preview roles on the dev server channel

    8.6.19

  • Core: Block iframe embedding of the dev server from non-localhost origins

    8.6.19

  • Core: Reject component search queries outside the project

    8.6.19

  • Core: Validate component export name when creating a story

    8.6.19

  • Core: Contain save story path to the project root

    8.6.19

  • Core: Validate save story name and arg keys as identifiers

    8.6.19

  • Addon Vitest: Disable browser file writes and command execution

    8.6.19

  • 🎁 Storybook Test installer for out-of-the-box tests in new projects

    8.6.0

  • 🦾 Accessibility “todo” workflow to systematically fix a11y violations

    8.6.0

11 internal lines (docs, tests, tooling) left out.