Packages

@storybook/addon-a11y

10.6.5 · 27 Oct 2026MIT17.8M / weekRepositoryHomepagenpmAtom feed

Upgrading @storybook/addon-a11y From 8.2.6 to 8.6.19

49 releases in betweennotes for 6

Reading releases, release notes and advisories…

Other targets from 8.2.6Latest10.6.5
  1. 8.2.6yours
  2. 29 releases
  3. 8.6.0security
  4. 18 releases
  5. 8.6.19target
1+
change to make
0
advisories fixed
56+
new
95+
fixes

Counted from 6 of 49 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • deprecated8.5.0

Security

  • 🚨 Key security fixes for Vite and ESbuild

    8.6.0

Release by release

  1. 8.6.19

    12 Oct 20261 new · 1 fix
    • new

      Core: Add host validation warning and origin validation for MCP

    • fixed

      Highlight: Prevent menu items from emitting arbitrary channel events

  2. 8.6.1 – 8.6.1818 releases, no release note

  3. 8.6.0

    Security fix25 Feb 202510 new · 19 fixes
    • security

      🚨 Key security fixes for Vite and ESbuild

    • new

      Addon A11y: Introduce parameters.a11y.test

    • new

      Addon-Test: Add telemetry data for Focused Tests

    • new

      Angular: Support experimental zoneless mode

  4. 8.5.1 – 8.5.88 releases, no release note

  5. 8.5.0

    Deprecation15 Jan 202523 new · 33 fixes
    • deprecated

      Addon Themes: Deprecate useThemeParameters

    • new

      Addon A11y: Add conditional rendering for a11y violation number in Testing Module

    • new

      Addon A11y: Add typesVersions support for TypeScript definitions in a11y package

    • new

      Addon Test: Add @vitest/coverage-v8 during postinstall if no coverage reporter is installed

  6. 8.4.3 – 8.4.75 releases, no release note

  7. 8.4.2

    5 Nov 20243 fixes
    • fixed

      Addon Test: Fix post-install logic for Next.js Vite framework support

    • fixed

      CLI: Fix Solid init by installing @storybook/test

    • fixed

      Next.js: Fix bundled react and react-dom in monorepos

  8. 8.4.1no release note

178 other lines we could not sort, mostly version bumps

  • Channels: Restrict preview postMessage to known manager origins

    8.6.19

  • Core: Separate manager and preview roles on the dev server channel

    8.6.19

  • Core: Block iframe embedding of the dev server from non-localhost origins

    8.6.19

  • Core: Reject component search queries outside the project

    8.6.19

  • Core: Validate component export name when creating a story

    8.6.19

  • Core: Contain save story path to the project root

    8.6.19

  • Core: Validate save story name and arg keys as identifiers

    8.6.19

  • Addon Vitest: Disable browser file writes and command execution

    8.6.19

  • 🎁 Storybook Test installer for out-of-the-box tests in new projects

    8.6.0

  • 🦾 Accessibility “todo” workflow to systematically fix a11y violations

    8.6.0

11 internal lines (docs, tests, tooling) left out.