storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
Upgrading storybook from 10.5.10 to 10.6.0
1 release in betweenevery note read
- 1
- change to make
- 0
- advisories fixed
- 21
- new
- 24
- fixes
Before you upgrade
Tick each one off as you go- deprecated10.6.0
Security
2 advisories still affect 10.6.0
- Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitescritical · GHSA-f2ph-cmg5-wxc8
- Storybook dev server vulnerable to code injection from the local networkhigh · GHSA-px85-f4q5-jh77
Upgrading to 10.6.2 clears them.
Release by release
- new
Angular: Add an in-process docgen analyzer, replacing Compodoc under the flag
- new
CLI: Add
storybook skillscommand - new
CLI: Allow esbuild builds for Storybook-owned pnpm dlx
- new
Core: Add additionnal field for component API in manifest
- new
102 other lines we could not sort, mostly version bumps
- 10.6.0
💻 CLI bindings for agent tools/skills
- 10.6.0
🅰️ Angular-Vite MCP/skills support and improved docgen/snippets (experimental)
- 10.6.0
🟢 Vue MCP/skills support and improved docgen/snippets (experimental)
- 10.6.0
🧩 Tanstack / NextJS-Vite framework bugfixes
- 10.6.0
⚡ Improved performance and reduced bundle size
- 10.6.0
Addon Vitest: Pin storybook/test in optimizeDeps so its CJS-only deps are prebundled
- 10.6.0
Addon Vitest: Report test runs with failures as failed tool outcomes
- 10.6.0
Addon-vitest: Filter Storybook instrumentation from reported stack traces
- 10.6.0
Angular-Vite: Run Compodoc on demand
- 10.6.0
Angular: Bind only what the component accepts in story snippets, and report the rest
7 internal lines (docs, tests, tooling) left out.