storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
Upgrading storybook from 10.4.6 to 10.5.0
1 release in betweenevery note read
Security
2 advisories still affect 10.5.0
- Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitescritical · GHSA-f2ph-cmg5-wxc8
- Storybook dev server vulnerable to code injection from the local networkhigh · GHSA-px85-f4q5-jh77
Upgrading to 10.6.2 clears them.
Release by release
- new
Addon Vitest: Add an initialGlobals option to pin a project's globals
- new
Angular: Add versioned
@types/nodeto packages installed duringstorybook init - new
Angular: Introduce @storybook/angular-vite package
- new
Angular: Support Angular 22 in Webpack framework
- new
83 other lines we could not sort, mostly version bumps
- 10.5.0
⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
- 10.5.0
🌈 Vitest initialGlobals: Test across themes, viewports, locales
- 10.5.0
🤖 Agentic review: AI-curated visual changesets and search results (experimental)
- 10.5.0
⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
- 10.5.0
🧑💻 Claude / Codex plugins: One-click ADE integration (experimental)
- 10.5.0
A11y: Surface required args and keyboard-reachable Setup controls in ArgsTable
- 10.5.0
Addon A11y: Preserve disabled a11y rules with runOnly
- 10.5.0
Addon Docs: DocsContent not filling available width when TOC is enabled
- 10.5.0
Addon Vitest: Subscribe for run completion before triggering it
- 10.5.0
Angular: Install @analogjs/vite-plugin-angular in angular-to-angular-vite automigration
11 internal lines (docs, tests, tooling) left out.