[pgherveou]

Release: @parity/truapi 0.19.0, @parity/truapi-host 0.19.0

Important

The PR title must start with release: for the publish workflow to fire.
Don't rewrite the squash commit subject in the merge dialog, the
release: prefix has to land on main.

Summary

0.19.0 keeps a product's client alive across an interrupted native host connection. The shared SDK transport replaces its WebSocket; pending calls and subscriptions fail with ConnectionResetError without replay, and providers can recreate their read/watch subscriptions after reconnection (#872). Browser permission checks go through generated internal SDK calls, hosts protect their shared authorization dependencies before product code runs, and SCALE boolean decoding rejects values other than 0 and 1.

CLI product scripts are sandboxed by default: the container's web API permission checks are shared between CLI scripts and the development bootstrap tag, with public SDK calls and permission checks sharing one product execution (#829).

The CLI gains reusable /script projects with dependency installation, editor types and TypeScript checking, which can be edited, rerun or created from the CLI; Product SDK scripts discover the active host automatically (#549).

@parity/truapi-host moves to 0.19.0 with @parity/truapi as the fixed pair. @parity/truapi-host/testing exposes a mock host products can be tested against: createMockHost, a Playwright fixture running the real core in a Web Worker, a node server, a no-iframe client, and dev accounts that sign with real sr25519. A second WASM bundle at ./wasm/testing carries the signing-host and test-host features, which stay off in the ./wasm/web production bundle (#294). @parity/truapi-debugger moves to 0.1.6 as a dependent bump and is not a release target, the same as at 0.1.5. @parity/truapi-provider stays at 0.2.1 (no changeset).

Checklist

• Ran npm run changeset and selected the package + bump type (patch / minor / major) — the four changesets on main were added by their own PRs
• Ran npm run version-packages to consume the changeset
• js/packages/truapi/package.json version is bumped
• js/packages/truapi-host/package.json version is bumped when releasing the host
• The PR title includes @parity/ios-host <version> when publishing the iOS host
• Regenerated iOS bindings and container outputs are committed; CI builds and simulator-tests the XCFramework, publishes it, then commits Package.swift
• The PR title includes @parity/android-host <version> when publishing the Android host AAR; nothing in the tree records that version, so there is no manifest to bump
• @parity/truapi-host depends on ^<current @parity/truapi version>
• js/packages/truapi/CHANGELOG.md has the new entry
• js/packages/truapi-host/CHANGELOG.md has the new entry when releasing the host
• rust/crates/truapi/Cargo.toml and rust/crates/truapi-host-cli/Cargo.toml versions match js/packages/truapi/package.json (npm run check-release-versions), and Cargo.lock records them
• Releasing @parity/truapi also publishes the prebuilt truapi-host binaries; no extra title entry is needed
• No leftover files under .changeset/ (other than config.json)

[github-actions]

CI Status: 21 required jobs green, 19 passed and 2 skipped by path filter.

All job results

job	result
android-bindings	success
changes	success
changeset-guard	success
cli-package	success
codegen	success
e2e	skipped
explorer	success
host-android-bindings	success
host-wasm	success
ios-bindings	success
ios-swift	success
licenses	success
playground	success
provider-android-bindings	success
release-guard	success
rust	success
ts-client	success
ts-debugger	success
ts-host	success
wasm-provider	success
workflow-lint	skipped

_{Commit ca8088da · run log}

[github-actions]

iOS simulator preview

Built from ca8088dac, stamped with it in TrUAPICommit.

gh run download 35779652443 --name simulator-preview-ca8088dac
unzip polkadot-app-*.app.zip
xcrun simctl install booted polkadot-app.app
xcrun simctl launch booted io.parity.polkadotapp.develop

Or download it in a browser, which arrives as a zip wrapping
the .app.zip, so it needs unzipping twice.

An arm64 simulator slice, so it needs an Apple Silicon Mac and does not
install on a device. Kept for 14 days, after which the link stops
resolving and a new push rebuilds it.