storybook
10.6.5 · 27 Oct 2026MIT22.3M / weekRepositoryHomepagenpmAtom feed
Upgrading storybook from 9.1.21 to 10.0.0
1 release in betweenevery note read
- 3
- changes to make
- 0
- advisories fixed
- 13
- new
- 29
- fixes
Before you upgrade
Tick each one off as you go- breaking10.0.0
- breaking10.0.0
- deprecated10.0.0
Security
4 advisories still affect 10.0.0
- Storybook manager bundle may expose environment variables during buildhigh · GHSA-8452-54wp-rmv6
- Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitescritical · GHSA-f2ph-cmg5-wxc8
- Storybook Dev Server is Vulnerable to WebSocket Hijackinghigh · GHSA-mjf5-7g4m-gx5w
- Storybook dev server vulnerable to code injection from the local networkhigh · GHSA-px85-f4q5-jh77
Upgrading to 10.6.2 clears them.
Release by release
- new
Addon Vitest: Support modifying mergeConfig on addon setup
- new
Addon-docs: Add eject button to canvas toolbar
- new
Angular: Add fileURLToPath for preview annotation paths
- new
CLI: Add addon-console automigration
- new
50 other lines we could not sort, mostly version bumps
- 10.0.0
🧩 Module automocking for easier testing
- 10.0.0
🏭 Typesafe CSF factories Preview for React
- 10.0.0
💫 UI editing and sharing optimizations
- 10.0.0
🏷️ Tag filtering exclusion and configuration for sidebar management
- 10.0.0
🔀 Next 16, Vitest 4, Svelte async components, and more!
- 10.0.0
A11Y: Bugfix missing
manager.jsentry-file - 10.0.0
A11y: Persist tab/highlight across docs navigation
- 10.0.0
AddonViewport: Stricter types
- 10.0.0
Angular: Inherit options from browserTarget
- 10.0.0
Cleanup: Remove duplicated entrypoints in core
2 internal lines (docs, tests, tooling) left out.