chore(deps-dev): bump storybook from 10.5.0 to 10.6.2 by dependabot[bot] · Pull Request #4914 · box/box-ui-elements

dependabot · 2026-10-21T21:57:40Z

Bumps storybook from 10.5.0 to 10.6.2.

Release notes

v10.6.2

10.6.2

Angular-Vite: Require @analogjs/vite-plugin-angular 2.7.3 or later - #36525, thanks @valentinpalkovic!

CLI: Fix hidden output of CLI commands on Yarn 1 - #36419, thanks @kasperpeulen!

Preact: Support Preact 11 - #36526, thanks @ghengeveld!

Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #36726, thanks @Sidnioulz!

Typescript: Explicitly type enhanceArgTypes - #35664, thanks @mrginglymus!

v10.6.1

10.6.1

Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @ghengeveld!

Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @valentinpalkovic!

CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @obvious-autobuild!

Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @shilman!

Core: Restore the change-detection CTA in the sidebar - #36214, thanks @ghengeveld!

TanStack: Support both interpolatePath signatures - #36333, thanks @BaconMan1168!

Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @kasperpeulen!

v10.6.0

10.6.0

New skills architecture for agentic workflows

Storybook 10.6 contains hundreds of fixes and improvements:

💻 CLI bindings for agent tools/skills

🅰️ Angular-Vite MCP/skills support and improved docgen/snippets (experimental)

🟢 Vue MCP/skills support and improved docgen/snippets (experimental)

🧩 Tanstack / NextJS-Vite framework bugfixes

⚡ Improved performance and reduced bundle size

Addon MCP: Stop silently dropping composed refs from MCP composition - #36077, thanks @kasperpeulen!

Addon Vitest: Pin storybook/test in optimizeDeps so its CJS-only deps are prebundled - #35572, thanks @Nic-Polumeyv!

Addon Vitest: Report test runs with failures as failed tool outcomes - #36080, thanks @kasperpeulen!

Addon Vitest: Resolve story test globs against the project root - #36103, thanks @kasperpeulen!

Addon-vitest: Filter Storybook instrumentation from reported stack traces - #36120, thanks @ghengeveld!

Angular Vite: Resolve tsConfig against the workspace root - #36026, thanks @ndelangen!

Angular-Vite: Run Compodoc on demand - #35776, thanks @valentinpalkovic!

Angular: Add an in-process docgen analyzer, replacing Compodoc under the flag - #35805, thanks @valentinpalkovic!

Angular: Bind only what the component accepts in story snippets, and report the rest - #35943, thanks @valentinpalkovic!

Angular: Decide the migration's zone.js import from the dependency tree - #36008, thanks @valentinpalkovic!

Angular: Declare story args the snippet markup binds by name - #35895, thanks @valentinpalkovic!

Angular: Declare style preprocessors as optional peers and name the missing one - #36098, thanks @valentinpalkovic!

Angular: Derive required inputs from Compodoc's own flag - #35758, thanks @valentinpalkovic!

Angular: Extract Compodoc parsing into its own package - #35749, thanks @valentinpalkovic!

... (truncated)

Changelog

Sourced from storybook's changelog.

10.6.2

Angular-Vite: Require @analogjs/vite-plugin-angular 2.7.3 or later - #36525, thanks @valentinpalkovic!

CLI: Fix hidden output of CLI commands on Yarn 1 - #36419, thanks @kasperpeulen!

Preact: Support Preact 11 - #36526, thanks @ghengeveld!

Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #36726, thanks @Sidnioulz!

Typescript: Explicitly type enhanceArgTypes - #35664, thanks @mrginglymus!

10.6.1

Addon A11y: Fix vision simulator color filters in Firefox - #36153, thanks @ghengeveld!

Addon Vitest: Support Vitest 5 browser tests - #36270, thanks @valentinpalkovic!

CLI: Fix vitest ERESOLVE on fresh Next.js apps. - #36310, thanks @obvious-autobuild!

Core: Fix build crash when ref reachability check fails mid-request - #36181, thanks @shilman!

Core: Restore the change-detection CTA in the sidebar - #36214, thanks @ghengeveld!

TanStack: Support both interpolatePath signatures - #36333, thanks @BaconMan1168!

Telemetry: One tools-command record per invocation with CLI toolset and tool names - #36210, thanks @kasperpeulen!

10.6.0

New skills architecture for agentic workflows

Storybook 10.6 contains hundreds of fixes and improvements:

💻 CLI bindings for agent tools/skills

🅰️ Angular-Vite MCP/skills support and improved docgen/snippets (experimental)

🟢 Vue MCP/skills support and improved docgen/snippets (experimental)

🧩 Tanstack / NextJS-Vite framework bugfixes

⚡ Improved performance and reduced bundle size

Addon MCP: Stop silently dropping composed refs from MCP composition - #36077, thanks @kasperpeulen!

Addon Vitest: Pin storybook/test in optimizeDeps so its CJS-only deps are prebundled - #35572, thanks @Nic-Polumeyv!

Addon Vitest: Report test runs with failures as failed tool outcomes - #36080, thanks @kasperpeulen!

Addon Vitest: Resolve story test globs against the project root - #36103, thanks @kasperpeulen!

Addon-vitest: Filter Storybook instrumentation from reported stack traces - #36120, thanks @ghengeveld!

Angular Vite: Resolve tsConfig against the workspace root - #36026, thanks @ndelangen!

Angular-Vite: Run Compodoc on demand - #35776, thanks @valentinpalkovic!

Angular: Add an in-process docgen analyzer, replacing Compodoc under the flag - #35805, thanks @valentinpalkovic!

Angular: Bind only what the component accepts in story snippets, and report the rest - #35943, thanks @valentinpalkovic!

Angular: Decide the migration's zone.js import from the dependency tree - #36008, thanks @valentinpalkovic!

Angular: Declare story args the snippet markup binds by name - #35895, thanks @valentinpalkovic!

Angular: Declare style preprocessors as optional peers and name the missing one - #36098, thanks @valentinpalkovic!

Angular: Derive required inputs from Compodoc's own flag - #35758, thanks @valentinpalkovic!

Angular: Extract Compodoc parsing into its own package - #35749, thanks @valentinpalkovic!

Angular: Extract component JSDoc through TypeScript's APIs - #35977, thanks @huang-julien!

Angular: Extract docgen on the server via Compodoc - #35733, thanks @valentinpalkovic!

Angular: Fix component resolution, MCP output, and dev/build path aliasing - #35952, thanks @valentinpalkovic!

... (truncated)

Commits

5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
b3ac816 Core: Cover component file name escaping in generated story imports
243c06b Merge pull request #36726 from storybookjs/sidnioulz/patch-internal-v11
d0c7fa2 Merge pull request #36526 from storybookjs/validate/preact-11
b49ded6 Merge pull request #36525 from storybookjs/fix/angular-vite-analog-2-7-3
e067572 Merge pull request #35664 from storybookjs/bill/fix-leaky-types
01331a5 Merge pull request #36419 from storybookjs/kasper/sb-2060-yarn1-proxy-remote-...
a17b725 Bump version from "10.6.0" to "10.6.1" [skip ci]
3077af4 Merge pull request #36310 from storybookjs/fix/init-vitest-range-stderr
22bf9df Merge pull request #36214 from storybookjs/ghengeveld/restore-change-detectio...
Additional commits viewable in compare view

coderabbitai · 2026-10-21T21:57:49Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: e923010e-2c9d-456e-a2a7-a8ac1f2a12b9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

socket-security · 2026-10-21T21:58:24Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/storybook@10.5.0 ⏵ 10.6.2	⁺¹⁰	⁺⁷⁵

View full report

mergify · 2026-10-23T18:12:33Z

abhishek1128 · 2026-10-23T22:29:22Z

@Mergifyio dequeue

abhishek1128 · 2026-10-23T22:29:53Z

@dependabot rebase

dependabot · 2026-10-23T22:29:59Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

dependabot · 2026-10-23T22:38:55Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

mergify · 2026-10-23T22:40:49Z

dependabot Bot requested a review from a team as a code owner October 21, 2026 21:57

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/storybook-10.6.2 branch from b8ea4ce to 29f8d65 Compare October 21, 2026 23:16

chore(deps-dev): bump storybook from 10.5.0 to 10.6.2

cd7fd10

jpan-box force-pushed the dependabot/npm_and_yarn/storybook-10.6.2 branch from 29f8d65 to cd7fd10 Compare October 23, 2026 18:01

jpan-box approved these changes Oct 23, 2026

View reviewed changes

mergify Bot added the queued label Oct 23, 2026

Merge branch 'master' into dependabot/npm_and_yarn/storybook-10.6.2

64fb7a1

mergify Bot added dequeued and removed queued labels Oct 23, 2026

jpan-box closed this Oct 23, 2026

jpan-box reopened this Oct 23, 2026

mergify Bot added queued and removed dequeued labels Oct 23, 2026

Merge branch 'master' into dependabot/npm_and_yarn/storybook-10.6.2

92f0f90

mergify Bot merged commit 3a5018f into master Oct 23, 2026
13 checks passed

mergify Bot deleted the dependabot/npm_and_yarn/storybook-10.6.2 branch October 23, 2026 23:16

mergify Bot removed the queued label Oct 23, 2026

Navigation Menu

Repository navigation

chore(deps-dev): bump storybook from 10.5.0 to 10.6.2 - #4914

chore(deps-dev): bump storybook from 10.5.0 to 10.6.2#4914
mergify[bot] merged 3 commits into
masterfrom
dependabot/npm_and_yarn/storybook-10.6.2

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 21, 2026 •

edited

Loading

Review skipped

Uh oh!

socket-security Bot commented Oct 21, 2026 •

edited

Loading

Uh oh!

mergify Bot commented Oct 23, 2026 •

edited

Loading

Uh oh!

abhishek1128 commented Oct 23, 2026

Uh oh!

abhishek1128 commented Oct 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 23, 2026

Uh oh!

mergify Bot commented Oct 23, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v10.6.2

10.6.2

v10.6.1

10.6.1

v10.6.0

10.6.0

10.6.2

10.6.1

10.6.0

Uh oh!

coderabbitai Bot commented Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

socket-security Bot commented Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mergify Bot commented Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Queue Status

Reason

Uh oh!

abhishek1128 commented Oct 23, 2026

Uh oh!

abhishek1128 commented Oct 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 23, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 23, 2026

Uh oh!

mergify Bot commented Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Queue Status

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

coderabbitai Bot commented Oct 21, 2026 •

edited

Loading

socket-security Bot commented Oct 21, 2026 •

edited

Loading

mergify Bot commented Oct 23, 2026 •

edited

Loading

mergify Bot commented Oct 23, 2026 •

edited

Loading