Packages

@storybook/react

10.6.5 · 27 Oct 2026MIT31.7M / weekRepositoryHomepagenpmAtom feed

Upgrading @storybook/react From 3.4.12 to 10.6.5

451 releases in betweennotes for 446

Reading releases, release notes and advisories…

  1. 3.4.12yours
  2. 4.0.0major
  3. 25 releases
  4. 5.0.0major
  5. 50 releases
  6. 6.0.0major
  7. 109 releases
  8. 7.0.0major
  9. 36 releases
  10. 7.4.0security
  11. 10 releases
  12. 7.6.0security
  13. 16 releases
  14. 7.6.17security
  15. 7 releases
  16. 8.0.0major
  17. 10 releases
  18. 8.1.0security
  19. 47 releases
  20. 8.6.0security
  21. 19 releases
  22. 9.0.0major
  23. 39 releases
  24. 10.0.0major
  25. 59 releases
  26. 10.5.5security
  27. 4 releases
  28. 10.5.10security
  29. 2 releases
  30. 10.6.2security
  31. 2 releases
  32. 10.6.5target
  33. 9 pre
26+
changes to make
0
advisories fixed
457+
new
1123+
fixes

Counted from 446 of 451 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking10.6.2
  • breaking10.4.0
  • breaking10.0.0
  • breaking10.0.0
  • breaking9.0.8
  • breaking9.0.0
  • breaking9.0.0
  • breaking9.0.0
  • breaking9.0.0
  • breaking9.0.0

Security

  • Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77

    10.6.2

  • Dependencies: Bump Vitest to 4.1.6 (CVE-2026-47428)

    10.5.10

  • Core: Upgrade `ws` to fix security advisories

    10.5.5

  • 🚨 Key security fixes for Vite and ESbuild

    8.6.0

  • Webpack: Bump webpack-dev-middleware to patch high security issue

    8.1.0

  • Core: Update ip version to fix CVE-2023-42282 - #26086, thanks @drik98!

    7.6.17

  • Dependencies: Update @babel/traverse and @babel/core to fix vulnerability - #24670, thanks @valentinpalkovic!

    7.6.0

  • Dependencies: Upgrade escodegen to fix security issue - #23973, thanks @shilman!

    7.4.0

Release by release

  1. 10.6.4 – 10.6.52 releases, nothing new or fixed in the notes

  2. 10.6.3

    20 Oct 20261 new · 1 fix
    • new

      Addon Vitest: Support Vitest 5

    • fixed

      Next.js: Fix app-router mock crash on Next.js 16.4

  3. 10.6.2

    Security fix12 Oct 20261 new · 1 fix
    • security

      Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77

    • breaking

      Angular-Vite: Require @analogjs/vite-plugin-angular 2.7.3 or later

    • new

      Preact: Support Preact 11

    • fixed

      CLI: Fix hidden output of CLI commands on Yarn 1

  4. 10.6.1

    29 Sep 20262 new · 4 fixes
    • new

      Addon Vitest: Support Vitest 5 browser tests

    • new

      TanStack: Support both interpolatePath signatures

    • fixed

      Addon A11y: Fix vision simulator color filters in Firefox

    • fixed

      CLI: Fix vitest ERESOLVE on fresh Next.js apps.

    • fixed

      Core: Fix build crash when ref reachability check fails mid-request

    • fixed

      Core: Restore the change-detection CTA in the sidebar

  5. 10.6.0

    Deprecation2 Sep 202621 new · 23 fixes
    • deprecated

      Vue: Deprecate vue-docgen-api

    • new

      Angular: Add an in-process docgen analyzer, replacing Compodoc under the flag

    • new

      CLI: Add `storybook skills` command

    • new

      CLI: Allow esbuild builds for Storybook-owned pnpm dlx

  6. 10.5.10

    Security fix20 Aug 2026
    • security

      Dependencies: Bump Vitest to 4.1.6 (CVE-2026-47428)

  7. 10.5.9

    18 Aug 20263 fixes
    • fixed

      Addon-Pseudo-States: Fix pseudo-states rewriting for nested functional selectors

    • fixed

      Preview: Fix crash when initialising UrlStore on a docs path

    • fixed

      Webpack: Prevent long preview output filenames

  8. 10.5.8

    13 Aug 20261 fix
    • fixed

      React: Fix RDT tsconfig selection for Vite project references

1278 other lines we could not sort, mostly version bumps

  • Typescript: Exclude all dunderscore prefixed folders from production compilation

    10.6.5

  • Core: Skip TypeScript loader hook registration under Jest

    10.6.4

  • Nextjs-Vite: Provide parentRenderTree.bfcacheId in app router mock

    10.6.3

  • TypeScript: Explicitly type returntype of ArgsStore#get

    10.6.3

  • Typescript: Explicitly type enhanceArgTypes

    10.6.2

  • Telemetry: One tools-command record per invocation with CLI toolset and tool names

    10.6.1

  • 💻 CLI bindings for agent tools/skills

    10.6.0

  • 🅰️ Angular-Vite MCP/skills support and improved docgen/snippets (experimental)

    10.6.0

  • 🟢 Vue MCP/skills support and improved docgen/snippets (experimental)

    10.6.0

  • 🧩 Tanstack / NextJS-Vite framework bugfixes

    10.6.0

274 internal lines (docs, tests, tooling) left out.