storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
Upgrading storybook from 9.0.4 to 9.1.21
35 releases in betweennotes for 30
Counted from 30 of 35 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking9.0.8
Security
Fixes 4 advisories affecting 9.0.4
- Storybook manager bundle may expose environment variables during buildhigh · GHSA-8452-54wp-rmv6
- Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitescritical · GHSA-f2ph-cmg5-wxc8
- Storybook Dev Server is Vulnerable to WebSocket Hijackinghigh · GHSA-mjf5-7g4m-gx5w
- Storybook dev server vulnerable to code injection from the local networkhigh · GHSA-px85-f4q5-jh77
Release by release
9.1.17 – 9.1.215 releases, no release note
- new
Core: Add
experimental_devServerpreset - fixed
CLI: Fix Nextjs project creation in empty directories
- fixed
Telemetry: Fix preview-first-load event
- new
- new
Core: Add
preview-first-loadtelemetry
- new
- fixed
Nextjs: Fix config access for Vite
- fixed
9.1.12nothing new or fixed in the note
- new
Telemetry: Add metadata for react routers
- fixed
Mocking: Fix
sb.mockusage in Storybook's deployed in subpaths - fixed
React Native Web: Fix REACT_NATIVE_AND_RNW should detect vite builder
- new
- new
Automigrations: Add automigration for viewport and backgrounds
- new
64 other lines we could not sort, mostly version bumps
- 9.1.15
Dependencies: Update
vite-plugin-storybook-nextjs - 9.1.12
Maintenance: Hotfix for missing nextjs dts files, thanks @ndelangen!
- 9.1.11
Automigration: Improve the viewport/backgrounds automigration
- 9.1.11
NextJS-Vite: Automatically fix bad PostCSS configuration
- 9.1.10
Telemetry: Log userAgent in onboarding
- 9.1.9
Svelte: Ignore inherited
HTMLAttributesdocgen when using utility types - 9.1.7
React: Preserve
@ts-expect-errorin preview - 9.1.7
Telemetry: Queue error reporting & filter browser-extention
- 9.1.6
CLI: Capture the version specifier used in
create-storybook - 9.1.6
Telemetry: Record known CLI integrations
13 internal lines (docs, tests, tooling) left out.