storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
8.6.19 is the newest release of 8.x.
In short
13 new15 fixed32 changed12 internal
Security
4 advisories affect 8.2.0; 8.6.19 fixes them
- CriticalStorybook: Missing origin validation in Storybook preview allows code injection from malicious websitesGHSA-f2ph-cmg5-wxc8 · 21 Oct 2026Fixed in 8.6.19
- HighStorybook dev server vulnerable to code injection from the local networkGHSA-px85-f4q5-jh77 · 22 Oct 2026Fixed in 8.6.19
- HighStorybook Dev Server is Vulnerable to WebSocket HijackingGHSA-mjf5-7g4m-gx5w · 26 Feb 2026Fixed in 8.6.17
- HighStorybook manager bundle may expose environment variables during buildGHSA-8452-54wp-rmv6 · 18 Dec 2025Fixed in 8.6.15
Release note
Hold onto your hats! Storybook 8.2 has dropped, packed with a treasure trove of new features and bug fixes:
🪝 New test hook
beforeAll🕹️ Enhanced
playfunction📦 Portable stories that let you use your stories in other testing tools
🎁 Consolidated dependency to bring you better performance in a smaller package
✨ Brand new onboarding experience to get you up to speed quicker
💯 Hundreds more improvements
List of all updates
Addon Controls: Fix saving on Windows
Addon Interactions: Use unique keys when rendering array nodes in panel
Addon Onboarding: Add icons for dev/test/doc to the splash screen
Addon Onboarding: New design and flow based on Save from Controls
Addon Onboarding: Trigger onboarding during init for Vue and Angular projects
Addon-A11y: Fix property default assignment
Angular: Allow format configuration of custom source preview
Angular: Allow outputPath object syntax
Angular: Cleanup types
Angular: Fix enableProdMode setting
Angular: Fix wrong detection of standalone components
Angular: Introduce preserveSymlink builder option
Angular: Update outputPath default value in angular-cli-webpack.js
Babel: Ensure story files not transpiled earlier than ES2017
Blocks: Fix reference to storybook core
Blocks: Prebundle
tocbotCLI: Add
--no-devoption toinitCLI: Add optional
--devand--no-devoptions tostorybook initCLICLI: Add support for Nuxt to project init
CLI: Fix CLI always asking all automigrations
CLI: Improve error message when fetching CLI version
CLI: Include
@storybook/addon-svelte-csfwhen initializing new projectsCLI: Prebundle get-npm-tarball-url and @ndelangen/get-tarball
Config: Apply JavaScript-only story glob extensions for JavaScript projects
Controls: Fix date picker control validation and assignment
Controls: Fix grouped Radio controls to have the same name
Controls: Throttling makes Color control lagging
Core: Add context as a property of the context (self-referencing)
Core: Add support for
beforeAllhookCore: Fix startup hang caused by watchStorySpecifiers
Core: Make sure StorybookError message shows up in browser console and interactions panel
Core: Migrate from
pkg-dirtofd-package-jsonCore: Refactor phases to run in order
loading->rendering->playingCore: Remove more
.stories.mdxhandlingCore: Remove util dependency
CPC: Add
CJSforcore/componentsCPC: Core Package Consolidation
CSF: Automatically extract componentPath
CSF: Rename
preview.jsglobalstoinitialGlobalsDependencies: Allow esbuild version 0.21.x
Dependency: Bump Express.js
Dependency: Remove node-fetch
Docs-tools: Replace
doctrinewithjsdoc-type-pratt-parserIndex: Fix MDX to override project-level autodocs
Indexer: Improve locating stories with specials chars in path
Next: Set default targets for next babel config
Next.js: Set
env.bugfixesin SWC so destructuring is never transpiledReact: Export ButtonProps and HeaderProps in CLI templates
SWC: Set default targets for swc that align with our esbuild targets
Telemetry: Stop prompting about crash reports in CI
Types: Fix type implementation for
CompatibleStringVite: Fix asset warning by externalizing sb-common-assets font
Vue3: Enable new hydration mismatch compile time flag
Webpack5/Vite: Fix sourcemaps