Skip to content

Release: Prerelease 11.0.0-alpha.6 - #36708

Merged
Sidnioulz merged 68 commits into
next-releasefrom
version-non-patch-from-11.0.0-alpha.5
Oct 12, 2026
Merged

Sidnioulz merged 68 commits into
next-releasefrom
version-non-patch-from-11.0.0-alpha.5

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

This is an automated pull request that bumps the version from `11.0.0-alpha.5` to `11.0.0-alpha.6`.
Once this pull request is merged, it will trigger a new release of version `11.0.0-alpha.6`.
If you're not a core maintainer with permissions to release you can ignore this pull request.

To do

Before merging the PR, there are a few QA steps to go through:

  • Add the "freeze" label to this PR, to ensure it doesn't get automatically forced pushed by new changes.
  • Add the "ci:daily" label to this PR, to trigger the full test suite to run on this PR.

And for each change below:

  1. Ensure the change is appropriate for the version bump. E.g. patch release should only contain patches, not new or de-stabilizing features. If a change is not appropriate, revert the PR.
  2. Ensure the PR is labeled correctly with one of: "BREAKING CHANGE", "feature request", "bug", "maintenance", "dependencies", "documentation", "build", "unknown".
  3. Ensure the PR title is correct, and follows the format "[Area]: [Summary]", e.g. "React: Fix hooks in CSF3 render functions". If it is not correct, change the title in the PR.
    • Areas include: React, Vue, Core, Docs, Controls, etc.
    • First word of summary indicates the type: “Add”, “Fix”, “Upgrade”, etc.
    • The entire title should fit on a line

This is a list of all the PRs merged and commits pushed directly to `next`, that will be part of this release:

  • ❗ Breaking Change: Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 #36726 (will also be patched)
  • 🐛 Bug: Addon Vitest: Apply framework options such as strictMode #36716
  • 🐛 Bug: Addon Docs: Map CSF plugin sourcemaps to the transform input #36463
  • 🐛 Bug: Core: Clean Up Paused Animations After AfterEach Failure #36107
  • 🐛 Bug: CLI: Restore pnpm minimumReleaseAge prechecks #36352
  • 🔧 Maintenance: Core: Limit onboarding checklist rainbow animation #36264 (will also be patched)
  • 🐛 Bug: CLI: Upgrade pnpm catalog entries instead of pinning catalog dependencies #36552
  • ❗ Breaking Change: Core: SB-2021 remove open-service getStatus and getGraphRevision aliases #36705
  • ✨ Feature Request: WC: Automigration from runtime to docgen #36648
  • 🐛 Bug: UI: Allow collapsing the testing widget after a crash #36575
  • 🐛 Bug: TanStack: Type story query params from the route's search schema #36502
  • 🔧 Maintenance: Docgen: Avoid loading test libraries in the Vue and Angular presets #36474
  • 🐛 Bug: UI: Fix JSX runtime resolution in manager addons #36465
  • 📝 Documentation: Docs: Clarify Angular provider decorators #36362
  • 🏗️ Build: Core: Unify the worker-gated story-docs provider #36684
  • 🏗️ Build: Core: Make manager globals test Windows-stable #36717

If you've made any changes doing the above QA (change PR titles, revert PRs), manually trigger a re-generation of this PR with this workflow and wait for it to finish. It will wipe your progress in this to do, which is expected.

Feel free to manually commit any changes necessary to this branch after you've done the last re-generation, following the Make Manual Changes section in the docs, especially if you're making changes to the changelog.

When everything above is done:


Generated changelog

11.0.0-alpha.6

  • Addon Docs: Map CSF plugin sourcemaps to the transform input - #36463, thanks mnkprs!
  • Addon Vitest: Apply framework options such as strictMode - #36716, thanks Metehan-Bicer!
  • CLI: Restore pnpm minimumReleaseAge prechecks - #36352, thanks ia319!
  • CLI: Upgrade pnpm catalog entries instead of pinning catalog dependencies - #36552, thanks valentinpalkovic!
  • Core: Clean Up Paused Animations After AfterEach Failure - #36107, thanks Raj4478!
  • Core: Limit onboarding checklist rainbow animation - #36264, thanks Thodorr!
  • Core: SB-2021 remove open-service getStatus and getGraphRevision aliases - #36705, thanks obvious-autobuild!
  • Docgen: Avoid loading test libraries in the Vue and Angular presets - #36474, thanks Cherry!
  • Security: Patch GHSA-f2ph-cmg5-wxc8 and GHSA-px85-f4q5-jh77 - #36726, thanks Sidnioulz!
  • TanStack: Type story query params from the route's search schema - #36502, thanks dasjideepak!
  • UI: Allow collapsing the testing widget after a crash - #36575, thanks eskres!
  • UI: Fix JSX runtime resolution in manager addons - #36465, thanks AkashNemade16!
  • WC: Automigration from runtime to docgen - #36648, thanks huang-julien!

Raj4478 and others added 30 commits August 31, 2026 20:35
The Rollup/Vite CSF plugin passed Vite's combined sourcemap to Babel as
`inputSourceMap`, so the map it returned already pointed at the original
file. Vite and Rollup compose transform maps themselves, so every earlier
transform's map was applied twice. Since the plugin runs after
`vite-plugin-storybook-test` (which reprints story files), addon-vitest
reported failures on the wrong line.

Return a map relative to the transform's own input instead, as the
vitest-plugin transformer already does. The webpack loader keeps
`inputSourceMap` because webpack does not chain loader maps.

Closes #36437

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
The Node-side story docs builders imported the helper from `storybook/internal/csf`, the browser
CSF entry, which pulls `storybook/test`, `@testing-library/dom` and `aria-query` into every
preset load. Core and the React renderer already use the lightweight `csf-utils` entry.
…cies

Upgrading a project whose Storybook packages come from a pnpm catalog
replaced every `catalog:` reference in package.json with a pinned version and
left the catalog in pnpm-workspace.yaml on the old version (calcite). Update
the catalog entry, keeping its range modifier and the file's comments, and
leave the `catalog:` reference alone.

(cherry picked from commit fab3f13)
Preserve the hook context when resolving the portable-stories conflict.
Update regression coverage for the current event-based animation cleanup,
including propagation of the original afterEach error.
…de loop

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@storybook-bot
storybook-bot force-pushed the version-non-patch-from-11.0.0-alpha.5 branch from 73b7d8c to d3c2882 Compare October 12, 2026 10:16
CLI: Upgrade pnpm catalog entries instead of pinning catalog dependencies
@storybook-bot
storybook-bot force-pushed the version-non-patch-from-11.0.0-alpha.5 branch from d3c2882 to 560c98c Compare October 12, 2026 11:16
@storybook-bot
storybook-bot force-pushed the version-non-patch-from-11.0.0-alpha.5 branch from 560c98c to 12920b1 Compare October 12, 2026 11:22
Sidnioulz and others added 3 commits October 12, 2026 13:35
…-cleanup

Core: Clean Up Paused Animations After AfterEach Failure
Addon Docs: Map CSF plugin sourcemaps to the transform input
@storybook-bot
storybook-bot force-pushed the version-non-patch-from-11.0.0-alpha.5 branch from 12920b1 to 5f3cd66 Compare October 12, 2026 11:45
…ions

Addon Vitest: Apply framework options such as strictMode
@storybook-bot
storybook-bot force-pushed the version-non-patch-from-11.0.0-alpha.5 branch from 5f3cd66 to e95cc6b Compare October 12, 2026 12:00
claude and others added 6 commits October 12, 2026 12:00
…rames

In dev mode, the manager now also requires a message from a registered
preview iframe to come from the origin that iframe was given. A window's
identity survives navigation, so a page a story navigated the preview
frame to could otherwise impersonate the preview.

Also skip the frame-ancestors smoke test against static builds, which
have no dev-server middleware, and fix a docs snippet comment.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01R8w8twwS3Q4g7B7syUG175
Vitest 5 resolves file-write and command-execution permissions from
`test.api` and ignores `test.browser.api`, which its types no longer
declare. Set the defaults on the resolved project config instead, which
covers both options and keeps the explicit permissions a user set on
either of them.

Also look up network interfaces per call again so the address helpers
reflect the current interfaces and can be mocked per test.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01R8w8twwS3Q4g7B7syUG175
@storybook-bot
storybook-bot force-pushed the version-non-patch-from-11.0.0-alpha.5 branch from e95cc6b to 28bcaff Compare October 12, 2026 13:51
@Sidnioulz Sidnioulz added ci:daily Run the CI jobs that normally run in the daily job. freeze Freeze the Release PR with this label labels Oct 12, 2026
@Sidnioulz Sidnioulz self-assigned this Oct 12, 2026
@storybook-app-bot

Copy link
Copy Markdown
Contributor

Package Benchmarks

Commit: 28bcaff, ran on 12 October 2026 at 14:02:52 UTC

The following packages have significant changes to their size or dependencies:

storybook

Before After Difference
Dependency count 73 73 0
Self size 21.64 MB 21.60 MB 🎉 -38 KB 🎉
Dependency size 31.24 MB 31.24 MB 0 B
Bundle Size Analyzer Link Link

@storybook/cli

Before After Difference
Dependency count 179 179 0
Self size 865 KB 872 KB 🚨 +7 KB 🚨
Dependency size 87.08 MB 87.04 MB 🎉 -39 KB 🎉
Bundle Size Analyzer Link Link

@storybook/codemod

Before After Difference
Dependency count 172 172 0
Self size 44 KB 44 KB 0 B
Dependency size 85.57 MB 85.53 MB 🎉 -38 KB 🎉
Bundle Size Analyzer Link Link

create-storybook

Before After Difference
Dependency count 74 74 0
Self size 1.07 MB 1.07 MB 🎉 -32 B 🎉
Dependency size 52.88 MB 52.84 MB 🎉 -38 KB 🎉
Bundle Size Analyzer node node

@Sidnioulz
Sidnioulz merged commit aa6d23d into next-release Oct 12, 2026
268 of 273 checks passed
@Sidnioulz
Sidnioulz deleted the version-non-patch-from-11.0.0-alpha.5 branch October 12, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:daily Run the CI jobs that normally run in the daily job. freeze Freeze the Release PR with this label release For PRs that trigger new releases. Automated

Projects

None yet

Development

Successfully merging this pull request may close these issues.