Packages

@storybook/addon-a11y

10.6.5 · 27 Oct 2026MIT17.8M / weekRepositoryHomepagenpmAtom feed

Upgrading @storybook/addon-a11y From 8.2.8 to 8.6.19

47 releases in betweennotes for 27

Reading releases, release notes and advisories…

Other targets from 8.2.8Latest10.6.5
  1. 8.2.8yours
  2. 27 releases
  3. 8.6.0security
  4. 18 releases
  5. 8.6.19target
1+
change to make
0
advisories fixed
66+
new
108+
fixes

Counted from 27 of 47 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • deprecated8.5.0

Security

  • 🚨 Key security fixes for Vite and ESbuild

    8.6.0

Release by release

  1. 8.6.19

    12 Oct 20261 new · 1 fix
    • new

      Core: Add host validation warning and origin validation for MCP

    • fixed

      Highlight: Prevent menu items from emitting arbitrary channel events

  2. 8.6.1 – 8.6.1818 releases, no release note

  3. 8.6.0

    Security fix25 Feb 202510 new · 19 fixes
    • security

      🚨 Key security fixes for Vite and ESbuild

    • new

      Addon A11y: Introduce parameters.a11y.test

    • new

      Addon-Test: Add telemetry data for Focused Tests

    • new

      Angular: Support experimental zoneless mode

  4. 8.5.7 – 8.5.82 releases, no release note

  5. 8.5.6

    14 Feb 20252 fixes
    • fixed

      Builder-Vite: Fix defaulting to allowing all hosts

    • fixed

      UI: Fix tags sort for browser back-compat

  6. 8.5.5

    12 Feb 20251 fix
    • fixed

      Builder-Vite: Fix Turbosnap

  7. 8.5.4

    11 Feb 20251 fix
    • fixed

      Builder-Vite: Fix allowedHosts handling for custom hosts

  8. 8.5.3

    1 Feb 20251 new · 1 fix
    • new

      Preview: Add globals to extract()

    • fixed

      Vite: Fix add component UI invalidation

198 other lines we could not sort, mostly version bumps

  • Channels: Restrict preview postMessage to known manager origins

    8.6.19

  • Core: Separate manager and preview roles on the dev server channel

    8.6.19

  • Core: Block iframe embedding of the dev server from non-localhost origins

    8.6.19

  • Core: Reject component search queries outside the project

    8.6.19

  • Core: Validate component export name when creating a story

    8.6.19

  • Core: Contain save story path to the project root

    8.6.19

  • Core: Validate save story name and arg keys as identifiers

    8.6.19

  • Addon Vitest: Disable browser file writes and command execution

    8.6.19

  • 🎁 Storybook Test installer for out-of-the-box tests in new projects

    8.6.0

  • 🦾 Accessibility “todo” workflow to systematically fix a11y violations

    8.6.0

11 internal lines (docs, tests, tooling) left out.