storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
Upgrading storybook from 10.1.11 to 10.2.0
1 release in betweenevery note read
Security
3 advisories still affect 10.2.0
- Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitescritical · GHSA-f2ph-cmg5-wxc8
- Storybook Dev Server is Vulnerable to WebSocket Hijackinghigh · GHSA-mjf5-7g4m-gx5w
- Storybook dev server vulnerable to code injection from the local networkhigh · GHSA-px85-f4q5-jh77
Upgrading to 10.6.2 clears them.
Release by release
- new
Addon-Docs: Add MDX manifest generation
- new
Addon-Vitest: Added timeout for fetching localhost 6006 during global setup.
- new
Controls: Allow resetting the Select control
- new
Core: Add
getStoryHrefsmanager API and add hotkey for "open in isolation"
- new
47 other lines we could not sort, mostly version bumps
- 10.2.0
💅 New Viewports and Zoom UI
- 10.2.0
🏭 Typesafe CSF factories for Vue, Angular, Web Components (preview)
- 10.2.0
📄 MDX support for Storybook MCP (experimental)
- 10.2.0
Addon-A11y: Lock vision filter dropdown for stories with
visionglobal - 10.2.0
Addon-Docs: Skip
!autodocsstories when computing primary story - 10.2.0
Addon-Vitest: Fallback detecting vitest version in postinstall
- 10.2.0
Addon-Vitest: Improve error message in testing widget modal
- 10.2.0
Addon-Vitest: Improve perf & fix loading incorrect
.envfile - 10.2.0
CLI: Detect free port when running dev during initiate
- 10.2.0
CLI: Remove any return type of getAbsolutePath
2 internal lines (docs, tests, tooling) left out.