storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
Upgrading storybook from 8.2.10 to 8.3.0
1 release in betweenevery note read
Security
4 advisories still affect 8.3.0
- Storybook manager bundle may expose environment variables during buildhigh · GHSA-8452-54wp-rmv6
- Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitescritical · GHSA-f2ph-cmg5-wxc8
- Storybook Dev Server is Vulnerable to WebSocket Hijackinghigh · GHSA-mjf5-7g4m-gx5w
- Storybook dev server vulnerable to code injection from the local networkhigh · GHSA-px85-f4q5-jh77
Upgrading to 8.6.19 clears them.
Release by release
- new
Addon Viewport: Add default options via parameters
- new
Addon Test: Add experimental vitest integration
- new
Builder-Vite: Add null character prefix to virtual file IDs
- new
CLI: Add conditional logging for manager and preview start
- new
32 other lines we could not sort, mostly version bumps
- 8.3.0
⚡️ First-class Vitest integration to run stories as component tests
- 8.3.0
🔼 Next.js-Vite framework for Vitest compatibility and better DX
- 8.3.0
🗜️ Further reduced bundle size for a smaller install footprint
- 8.3.0
🌐 Experimental Story globals to standardize stories for themes, viewports, and locales
- 8.3.0
💯 Hundreds more improvements
- 8.3.0
Addon Test: Improve messages and post install script handling
- 8.3.0
Addon Test: Set default viewport if applicable
- 8.3.0
Addon Test: Set screenshotFailures to false by default
- 8.3.0
Addon Docs: Remove babel dependency
- 8.3.0
Backgrounds/Viewports: Make defaults overridable in
StoryGlobals-mode
5 internal lines (docs, tests, tooling) left out.