@storybook/components
8.6.14 · 16 May 2025MIT7.5M / weekRepositoryHomepagenpmAtom feed
Where each line stands
Plan an upgradeLatest releases
All 387 releases- 8.x · latest line
8.6.19
12 Oct 2026Highlight: Prevent menu items from emitting arbitrary channel events
Channels: Restrict preview postMessage to known manager origins
Core: Separate manager and preview roles on the dev server channel
Highlight: Prevent menu items from emitting arbitrary channel events
Channels: Restrict preview postMessage to known manager origins
Core: Separate manager and preview roles on the dev server channel
Core: Block iframe embedding of the dev server from non-localhost origins
Core: Reject component search queries outside the project
Core: Validate component export name when creating a story
Core: Add host validation warning and origin validation for MCP
Core: Contain save story path to the project root
Core: Validate save story name and arg keys as identifiers
Addon Vitest: Disable browser file writes and command execution
8.6.18
6 Mar 20268.6.17
18 Feb 2026
Notes older than 90 days are read on the Releases tab.
Dependency tracking · free for 3 projects
Know when your own dependencies move
@storybook/components published 9 releases in the last 12 months. inlinr folds the routine ones into a line and keeps the few that need you.
Advisories reach you
An email when a critical or high advisory affects a project, before the next install.
Upgrades checked first
Peer ranges, Node, ESM-only and types changes read before you bump.
Only what matters
Majors and breaking notes stay; patches and sibling bumps fold into one line.
Reading releases, release notes and advisories…
Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.