Upgrading @storybook/addon-links 8 to 9
Breaking8.6.19 → 9.1.21Breaking24Security15Platform4New50Changed140Fixed190Other26
BreakingUpgrade verdict
24 breaking changes and 4 platform requirement changes and 15 security fixes.
In plain terms
- Some placeholder addon packages that only re-exported other packages are removed.
- Code that imported blocks from the Docs addon will no longer find that export.
- Removes addon-docs from Addon-Essentials.
- The story source addon package is no longer available.
Must act Top 5 of 43 that need code or config changes
@storybook/addon-links publishes an official migration guide for version 9. It covers more than the release notes do.
Migration guide ↗Drops ts-dedent.
Installs 1 package in all (was 2).
What you must change
Breaking24
Deletes shim addon packages from Core.
Removes the export of blocks from AddonDocs.
Removes addon-docs from Addon-Essentials.
addon-docsRemoves @storybook/addon-storysource.
@storybook/addon-storysourceAutomigration removes @storybook/addon-essentials.
@storybook/addon-essentialsAutomigration removes the docs.autodocs field.
docs.autodocsRemoves
util, browser-assert and process dependencies.utilbrowser-assertprocessRemoves the
uuid package from core.uuidRemoves support for HTML Webpack 5.
Removes deprecated APIs.
Removes deprecated packages.
Removes deprecated Next.js compatibility files.
Removes support for Preact Webpack 5.
Removes the @storybook/addon-mdx-gfm addon.
@storybook/addon-mdx-gfmRemoves the Source Loader package.
Removes Webpack 5 support for Vue 3.
Removes Webpack 5 support for Web Components.
Renames
@storybook/experimental-addon-test to @storybook/addon-vitest.@storybook/experimental-addon-test@storybook/addon-vitestReplaces the
element parameter with context in Addon-a11y.elementcontextMigrates to the new test provider API and drops Vitest 2 support.
Removes deprecated parts of the test provider API.
Merges
@storybook/core into the storybook package.@storybook/corestorybookOnly exports definePreview from the framework in CSF.
definePreviewMoves @storybook/test into storybook/test.
@storybook/teststorybook/testSecurity15
Prevents Highlight menu items from emitting arbitrary channel events.
Restricts preview postMessage to known manager origins.
postMessageSeparates manager and preview roles on the dev server channel.
Blocks iframe embedding of the dev server from non-localhost origins.
Rejects component search queries outside the project.
Validates component export name when creating a story.
Adds host validation warning and origin validation for MCP.
MCPContains save story path to the project root.
Validates save story name and arg keys as identifiers.
Disables browser file writes and command execution in Addon Vitest.
Adds request validation.
Hardens the websocket connection.
Applies dependency upgrades for security.
Applies dependency upgrades for security.
Applies dependency upgrades for security.
Platform4
Allows ember v5 as a peer dependency.
emberExtends the
vite peerDependencies range to include 7.0.0.viteAligns supported Node.js versions.
Drops TypeScript < 4.9 support.
TypeScriptAPI changes
Generated by DepDelta from published .d.ts files. Not mixed with prose notes.
- changed:
const default: () => core_dist_types.ProjectAnnotations<core_dist_types.Renderer> → const default: () => storybook_internal_csf.PreviewAddon<storybook_internal_csf.AddonTypes>