storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
10.6.5 is the newest release of 10.x.
In short
1 breaking1 removed1 deprecated12 new1 faster29 fixed50 changed2 internal
- breaking
Storybook 10 contains one breaking change: it’s ESM-only.
- removed
Maintenance: Remove globalization for dropped entrypoints
- deprecated
Core: Mark pnp support as deprecated
Security
4 advisories affect 10.0.0; 10.6.2 fixes them
- CriticalStorybook: Missing origin validation in Storybook preview allows code injection from malicious websitesGHSA-f2ph-cmg5-wxc8 · 21 Oct 2026Fixed in 10.6.2
- HighStorybook dev server vulnerable to code injection from the local networkGHSA-px85-f4q5-jh77 · 22 Oct 2026Fixed in 10.6.2
- HighStorybook Dev Server is Vulnerable to WebSocket HijackingGHSA-mjf5-7g4m-gx5w · 26 Feb 2026Fixed in 10.2.10
- HighStorybook manager bundle may expose environment variables during buildGHSA-8452-54wp-rmv6 · 18 Dec 2025Fixed in 10.1.10
Release note
Storybook 10 contains one breaking change: it’s ESM-only. This simplifies our distribution and reduces install size by 29% while simultaneously unminifying dist code for easier debugging.
It also includes features to level up your UI development, documentation, and testing workflows:
🧩 Module automocking for easier testing
🏭 Typesafe CSF factories Preview for React
💫 UI editing and sharing optimizations
🏷️ Tag filtering exclusion and configuration for sidebar management
🔀 Next 16, Vitest 4, Svelte async components, and more!
List of all updates
A11Y: Bugfix missing
manager.jsentry-fileA11y: Persist tab/highlight across docs navigation
Addon A11y: Prevent setting highlights for old results
Addon Docs: Fix Symbol conversion issue in docs page and controls panel
Addon Vitest: Fix incorrect file modifications during setup
Addon Vitest: Support modifying mergeConfig on addon setup
Addon-docs: Add eject button to canvas toolbar
AddonA11Y: Fix postinstall
AddonViewport: Stricter types
Angular: Add fileURLToPath for preview annotation paths
Angular: Fix
entry.polyfillsundefined errorAngular: Inherit options from browserTarget
AutoMigration: Fix sb10 migration when main config contains
requireCleanup: Remove duplicated entrypoints in core
CLI: Add addon-console automigration
CLI: Avoid mixed CSF in files with unconventional stories
CLI: Change message in downgrade-blocker
CLI: CSF factories codemod - support annotations in npx context
CLI: Fix CSF factories addon syncing in storybook add command
CLI: Fix throwing in readonly environments
CLI: Init not running
devwhen it should fixedCLI: Make relative imports default in csf-factories codemod
CLI: Switch over to modern-tar
Codemod: Replace
globbywithtinyglobbyControls: Allow primitive values of ReactNode argType
Controls: Fix adding new values to arrays
Core: Add "open in editor" feature
Core: Add parameter typings for addon-pseudo-state
Core: Dedupe aria-query and @testing-library/dom packages
Core: Enhance warning for Testing Library's
screenusage in docs modeCore: Ensure valid QR code URL
Core: Fix
external-globals-pluginhandleundefinedcache dirCore: Fix Node 24 deprecation warning
Core: Fix staticCopy not copying
index.htmlto sub directoryCore: Fix stepping back through story interactions panel
Core: Improve addon detection in automigrations on windows
Core: Improve es-toolkit usage for better tree-shaking
Core: Join framework preset path with slash
Core: Make
subtypean optional property on an index input- deprecated
Core: Mark pnp support as deprecated
Core: Prevent
BAILstate from showing in interactions panel when switching storiesCore: Prevent navigating to hidden (filtered) item
Core: Remove CJS bundles, only ship ESM
Core: Replace es-toolkit compat imports with non-compat
Core: Switch from
mllytoexsolveCore: Update tags filter UI
Core: Use
exsolveresolveModulePathforsafeResolveModuleCore: Various QA fixes
CoreServer: Fix
Arc can't get every windowCSF: Add Storybook test syntax (Storybook v10)
CSF: Enhance config-to-csf-factory to support type wrappers
Dts: Ensure
.tsxfiles emit.d.tstype filesAllow proceeding without selecting automigrations in upgrade command
ESLint plugin homepage URL updates
Incorrect URLS for the upgrade command
Maintenance: Fix bundle size bloat caused by
SyntaxHighlighter(createElement)Maintenance: Hotfix for missing nextjs dts files, thanks @ndelangen!
- removed
Maintenance: Remove globalization for dropped entrypoints
Mock: Catch errors when transforming preview files
Modernize: Replace
fs-extrawith native APIsMove: Addon jest into it's own repository
Next.js-vite: Use
fileURLToPathfor module resolution in presetNext.js: Avoid multiple webpack versions at runtime
Next.js: Remove next/config usage in Next.js >=v16 projects
Next.js: Return mocked router instead of actual router in useRouter
Nextjs: Fix config access for Vite
Nextjs: Fix Nextjs version detection with prereleases
Onboarding: Prevent confetti overlay from intercepting pointer events
Onboarding: Tweak referral wording in survey
PreactVite: Add
nodeentry pointPresets: Support extensionless imports in TS-based presets
React Native: Fix document reference error in open-in-editor
React: Simplify version detection
Replace: Use
empathicoverfind-upSvelte: Improve support for async components
Svelte: Simplify public types - use modern
ComponentSvelteKit: Add support for mocking
$app/stateSvelteKit: Fix
set_context_after_initerror when experimental async is enabledTags: Remove undocumented x-only tags
Telemetry: Improve dev cancellation handling
Telemetry: Send index stats on dev exit
UI: Allow showing or hiding the addon panel
UI: Improve sidebar empty state
UI: Improve syntax-highlighter bundling
Update: Satellite repos after major version bump
Upgrade: Enhance ESM compatibility checks and banner generation
Upgrade: Packages
openUpgrades: Packages
boxencommandergigetVite: Optimize @storybook/addon-docs/blocks dependency