storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
10.6.5 is the newest release of 10.x.
In short
1 deprecated21 new24 fixed102 changed7 internal
- deprecated
Vue: Deprecate vue-docgen-api
Security
2 advisories affect 10.6.0; 10.6.2 fixes them
- CriticalStorybook: Missing origin validation in Storybook preview allows code injection from malicious websitesGHSA-f2ph-cmg5-wxc8 · 21 Oct 2026Fixed in 10.6.2
- HighStorybook dev server vulnerable to code injection from the local networkGHSA-px85-f4q5-jh77 · 22 Oct 2026Fixed in 10.6.2
Release note
New skills architecture for agentic workflows
Storybook 10.6 contains hundreds of fixes and improvements:
💻 CLI bindings for agent tools/skills
🅰️ Angular-Vite MCP/skills support and improved docgen/snippets (experimental)
🟢 Vue MCP/skills support and improved docgen/snippets (experimental)
🧩 Tanstack / NextJS-Vite framework bugfixes
⚡ Improved performance and reduced bundle size
List of all updates
Addon MCP: Stop silently dropping composed refs from MCP composition
Addon Vitest: Pin storybook/test in optimizeDeps so its CJS-only deps are prebundled
Addon Vitest: Report test runs with failures as failed tool outcomes
Addon Vitest: Resolve story test globs against the project root
Addon-vitest: Filter Storybook instrumentation from reported stack traces
Angular Vite: Resolve tsConfig against the workspace root
Angular-Vite: Run Compodoc on demand
Angular: Add an in-process docgen analyzer, replacing Compodoc under the flag
Angular: Bind only what the component accepts in story snippets, and report the rest
Angular: Decide the migration's zone.js import from the dependency tree
Angular: Declare story args the snippet markup binds by name
Angular: Declare style preprocessors as optional peers and name the missing one
Angular: Derive required inputs from Compodoc's own flag
Angular: Extract Compodoc parsing into its own package
Angular: Extract component JSDoc through TypeScript's APIs
Angular: Extract docgen on the server via Compodoc
Angular: Fix component resolution, MCP output, and dev/build path aliasing
Angular: Fix eight upgrade and migration bugs
Angular: Fix ten docgen bugs found across 22 community repositories
Angular: Generate story-docs snippets from the analyzer
Angular: Give agents real input and output documentation
Angular: Hide class internals from the props table by default
Angular: Install the
@storybook/angular-vitepeers that nothing else brings inAngular: Keep the function control on constructor and generic signatures
Angular: Make experimentalDocgenServer the default in angular-vite
Angular: Migrate Analog projects to angular-vite instead of refusing them
Angular: Print unevaluable story args instead of slicing the file
Angular: Read the story shapes that supply their own markup
Angular: Render self-closing tags in server-side docs snippets
Angular: Render the required badge for required inputs in the props table
Angular: Resolve
@angular/corethrough the package manager, not the raw specifierAngular: Resolve builder
stylesthe way the Angular builders doAngular: Resolve builder styles against the workspace root
Angular: Skip the runtime source decorator when the docgen server produces snippets
Angular: Stop marking a defaulted input as required in the props table
Angular: Stop treating input/output alias collisions as two-way bindings
Angular: Hoist non-literal args onto the host component instead of inlining them
Builder-Webpack5: Use strict mtime equality for mock cache reuse
CLI plugins: Delegate to
storybook skills/storybook toolsand align the evalsCLI: Add
storybook skillscommandCLI: Align
storybook skillswithstorybook toolsshapeCLI: Allow esbuild builds for Storybook-owned pnpm dlx
CLI: Attach to the most recent matching Storybook instance and add --port target selection
CLI: Categorize Execa failures for init telemetry
CLI: Detect Turbopack, Module Federation, and renderer versions
CLI: Drop
skills get/skills list, addskills --allCLI: Enrich tools-command telemetry with attach dimensions
CLI: Fix stories changed hanging on attach
CLI: Keep
storybook tools --jsonstdout parseableCLI: Label the tools help
Outputblock as the--jsonshapeCLI: Match Storybook instances across Windows drive-letter case
CLI: Offer the new 10.5 experimental feature flags during upgrade
CLI: Point the init outro at
storybook skills get setupand remove duplicate sandbox addonCLI: Render the same toolset output as MCP
CLI: Serve the skills docs workflow whenever manifests are producible
CLI: Silence auto-mode fallback when no Storybook is running
Core: Add additionnal field for component API in manifest
Core: Add security token to instance registry record
Core: Add storybook/internal/tools SDK skeleton
Core: Allow token-only WebSocket upgrade without Origin
Core: Always show warning in story-docs if available
Core: Centralize import-statement generation in csf-tools
Core: Define shared public toolsets (defineToolset)
Core: Extract ComponentMetaManager to Core
Core: Fix change detection missing working-tree edits until a commit
Core: Fix module resolution for packages with conditional-only exports maps
Core: Fix resolve wrapped addon entries via package exports map
Core: Include null union members as enum options in TS argTypes conversion
Core: Keep Tabs memo out of an esbuild joined var
Core: Make TypeScript's JSDoc semantics canonical for component docgen
Core: Move docgen JSDoc parser into csf-tools
Core: Move the component-meta invalidation state machine into core
Core: Recover from a docgen worker death instead of going dark for the session
Core: Remove experimental Playwright CT integration
Core: Resolve tsconfig paths from the defining config
Core: Restore the args a server-docgen preview cannot type
Core: Scope in-flight open-service loads to their runtime
Core: Share the CSF story-shape helpers snippet generators need
Core: Share the program-backed half of a component-meta project
Core: Skip builder preset in headless loading if non-existing
Core: Warn when multiple story files collapse onto one componentId
Docgen server: Resolve arg spreads and identifier references in static snippets
Harness: Gate the Angular component meta analyzer against Compodoc
Icons: Add missing @storybook/icons to the toolbar icon map
Init: Detect TanStack packages in peerdependencies
Manager API: Add experimental_setFilters batch API
Manager: Fix sidebar scroll on iOS Safari
Manager: Toggle the mobile navigation drawer with the sidebar keyboard shortcut
Manifest Debugger: Stable deep-link anchors for component cards
Manifest debugger: Show the API description and snippet warnings
Manifests: Add a warning field to story entries
Mcp: Support JsDoc annotations in component documentation
NextJS: Normalize trailing slash in the next/link mock
Nextjs-Vite: Move vite-plugin-storybook-nextjs into the monorepo
Nextjs-Vite: Recover from Next.js 16.3 raw config cache
Nextjs-Vite: Support % in next/font/local declarations
Nextjs-Vite: Unwrap CJS loadJsConfig on Vite 7
Nextjs: Replace archived image-size with probe-image-size
OSA: Review fixes for toolsets, skills, and MCP
Open Service: Add delegated mode for Open Service transports
Performance: Halve the tools CLI cold-boot time
React: Share a TypeScript DocumentRegistry across component-meta projects
Review: Use correct role for footer
Search: Add docs headings to search results
Search: Show docs stories as docs search result item instead of a story-group search result item
Skills M2b: Rework the core toolsets into their intended shape
Skills M4: Run addon-mcp and @storybook/mcp on the shared core toolsets
Skills M5a: CLI: Add the public
storybook toolscommand derived at runtime from the OSA toolsetsTanStack: Carry lazy route bindings onto cloned routes
TanStack: Keep Start's document shell out of stories
TanStack: Select the story leaf by mount path and params
Tanstack: Use dependency chain for deps optimization
Telemetry: Track StyleX as a styling package
Tools: Accept a story ID in
docs show-storyas an alternative to componentId + storyNameTools: Auto-spawn a project-local child host on fidelity failure
Tools: Default to attach mode, delete MCP proxy
Tools: Flush remote-command ack before the handler's fan-out starts
Tools: Implement attached mode in
storybook/internal/toolsTools: Record the dev server's storybook installation and attach through it
Tools: Spawn a child host for local mode when cwd differs
UI: Fix missing whitespace in search result breadcrumb
Vue3 Vite: Enable Schema Extraction for Vue Component Meta
Vue3: Support TypeScript enum props in vue-component-meta docgen
Vue: Add story-docs provider skeleton
Vue: Allow args to be explictly undefined in story-snippet generation
Vue: Decouple server side docgen from docgen options
- deprecated
Vue: Deprecate vue-docgen-api
Vue: Don't override story-snippet if already provided
Vue: Fix Component Metadata in Production Builds
Vue: Fix docgen fidelity gaps
Vue: Fix docgen slot, exposed-member, and add warning for snippet losses
Vue: Follow a re-export to the component that declares it
Vue: Format correctly story snippets
Vue: Generate Story snippets from docgen payload
Vue: Inject component import directly in script for story-docs
Vue: Move vue-component-meta in vue renderer and implement docgen payload builder
Vue: Provide apiDescription in the manifest
Vue: Raise the vue-component-meta floor to ^3.3.9
Vue: Rearchitecture Story snippet generation
Vue: Resolve docgen per export so a type-only export does not drop a file's prop tables
Vue: Substitute static arg values in template snippet expressions
Vue: Support h() render trees and @import overrides for snippets
Vue: Support story template for snippet generation