Packages

storybook

10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed

Upgrading storybook from 9.1.18 to 10.6.5

75 releases in betweennotes for 72

Other targets from 9.1.18Newest 9.x, Clears its 3 advisories9.1.21
5+
changes to make
3
advisories fixed
155+
new
226+
fixes

Counted from 72 of 75 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking10.4.0
  • breaking10.0.0
  • breaking10.0.0
  • deprecated10.6.0
  • deprecated10.0.0

Security

Fixes 3 advisories affecting 9.1.18

  • Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77

    10.6.2

  • Dependencies: Bump Vitest to 4.1.6 (CVE-2026-47428)

    10.5.10

  • Core: Upgrade ws to fix security advisories

    10.5.5

Release by release

  1. 10.6.4 – 10.6.52 releases, nothing new or fixed in the notes

  2. 10.6.3

    20 Oct 20261 new · 1 fix
    • new

      Addon Vitest: Support Vitest 5

    • fixed

      Next.js: Fix app-router mock crash on Next.js 16.4

  3. 10.6.2

    12 Oct 20261 new · 1 fix
    • new

      Preact: Support Preact 11

    • fixed

      CLI: Fix hidden output of CLI commands on Yarn 1

  4. 10.6.1

    29 Sep 20262 new · 4 fixes
    • new

      Addon Vitest: Support Vitest 5 browser tests

    • new

      TanStack: Support both interpolatePath signatures

    • fixed

      Addon A11y: Fix vision simulator color filters in Firefox

    • fixed

      CLI: Fix vitest ERESOLVE on fresh Next.js apps.

    • fixed

      Core: Fix build crash when ref reachability check fails mid-request

    • fixed

      Core: Restore the change-detection CTA in the sidebar

  5. 10.6.0

    2 Sep 202621 new · 24 fixes
    • new

      Angular: Add an in-process docgen analyzer, replacing Compodoc under the flag

    • new

      CLI: Add storybook skills command

    • new

      CLI: Allow esbuild builds for Storybook-owned pnpm dlx

    • new

      Core: Add additionnal field for component API in manifest

  6. 10.5.10nothing new or fixed in the note

  7. 10.5.9

    18 Aug 20263 fixes
    • fixed

      Addon-Pseudo-States: Fix pseudo-states rewriting for nested functional selectors

    • fixed

      Preview: Fix crash when initialising UrlStore on a docs path

    • fixed

      Webpack: Prevent long preview output filenames

  8. 10.5.8

    13 Aug 20261 fix
    • fixed

      React: Fix RDT tsconfig selection for Vite project references

471 other lines we could not sort, mostly version bumps

  • Typescript: Exclude all dunderscore prefixed folders from production compilation

    10.6.5

  • Core: Skip TypeScript loader hook registration under Jest

    10.6.4

  • Nextjs-Vite: Provide parentRenderTree.bfcacheId in app router mock

    10.6.3

  • TypeScript: Explicitly type returntype of ArgsStore#get

    10.6.3

  • Angular-Vite: Require @analogjs/vite-plugin-angular 2.7.3 or later

    10.6.2

  • Typescript: Explicitly type enhanceArgTypes

    10.6.2

  • Telemetry: One tools-command record per invocation with CLI toolset and tool names

    10.6.1

  • 💻 CLI bindings for agent tools/skills

    10.6.0

  • 🅰️ Angular-Vite MCP/skills support and improved docgen/snippets (experimental)

    10.6.0

  • 🟢 Vue MCP/skills support and improved docgen/snippets (experimental)

    10.6.0

34 internal lines (docs, tests, tooling) left out.