storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
Upgrading storybook from 8.5.8 to 8.6.0
1 release in betweenevery note read
Security
4 advisories still affect 8.6.0
- Storybook manager bundle may expose environment variables during buildhigh · GHSA-8452-54wp-rmv6
- Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitescritical · GHSA-f2ph-cmg5-wxc8
- Storybook Dev Server is Vulnerable to WebSocket Hijackinghigh · GHSA-mjf5-7g4m-gx5w
- Storybook dev server vulnerable to code injection from the local networkhigh · GHSA-px85-f4q5-jh77
Upgrading to 8.6.19 clears them.
- 8.6.0
🚨 Key security fixes for Vite and ESbuild
Release by release
- new
Addon A11y: Introduce parameters.a11y.test
- new
Addon-Test: Add telemetry data for Focused Tests
- new
Angular: Support experimental zoneless mode
- new
Angular: Support v19.2 when @angular/animations is not installed
- new
23 other lines we could not sort, mostly version bumps
- 8.6.0
🎁 Storybook Test installer for out-of-the-box tests in new projects
- 8.6.0
🦾 Accessibility “todo” workflow to systematically fix a11y violations
- 8.6.0
🗜️ 80% smaller create-storybook package for much faster installs
- 8.6.0
🧪 Dozens of Test fixes based on user feedback
- 8.6.0
📕 Docs fixes for table of contents, code snippets, and more
- 8.6.0
💯 Hundreds more improvements
- 8.6.0
Addon-Docs: Change URL hash when TOC item is clicked, and fix TOC loading bugs
- 8.6.0
Addon-docs: Consider custom code snippet in story code panel and update styles
- 8.6.0
Addon-Test: Make sure that only one global portable story config is ever loaded
- 8.6.0
Cleanup: Remove unused constants in viewport addon