ExploitedPHP2Shell is now on CISA KEV

storybook@10.6.4

Skip this version — install 10.6.5 instead.

Followed by 10.6.5 within 29 h, faster than this project's usual cadence — likely a hotfix.

Why this verdict

  • Followed by 10.6.5 within 29 h, faster than this project's usual cadence — likely a hotfix.Evidence
  • Published 29 h ago; most regressions surface within 72 h.Evidence
  • Release notes list 1 breaking change: Storybook now skips the TypeScript loader hook registration when running under Jest, changing the default behavior.Evidence

Confidence 100% · algorithm v1 · computed 2026-10-27. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
None known (OSV)
License
MIT
Install scripts
None
Build provenance
Signed provenance
Weekly downloads
60,689

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

Breaking changes in the release notes

  • Storybook now skips the TypeScript loader hook registration when running under Jest, changing the default behavior.“Core: Skip TypeScript loader hook registration under Jest”

AI-extracted from the official release notes and checked against the quoted text. Read the source

2 issues mention this version in storybookjs/storybook so far (14-day window still open). See them on GitHub

Check the official release notes below for behaviour changes before merging.

Release notes

Read the Storybook changelog on Changes.Watch or the package page on npm for this version’s features and fixes.

Deprecations and deadlines

The maintainer has not deprecated this version on npm.

Did upgrading to 10.6.4 work for you?

Results appear once three developers have voted.

More storybook verdicts