release: @parity/truapi 0.21.0, @parity/truapi-host 0.21.0, @parity/truapi-provider 0.2.2, @parity/ios-host 0.21.0, @parity/android-host 0.21.0

[johnthecat]

Release: @parity/truapi 0.21.0, @parity/truapi-host 0.21.0, @parity/truapi-provider 0.2.2, @parity/ios-host 0.21.0, @parity/android-host 0.21.0

Summary

Minor release.

• Permission prompts name the product that asked, on the web, iOS and Android host callbacks (feat(permissions): pass the requesting ProductContext to permission prompts #936).
• The browser core loads verifiable on demand as truapi_verifiable.js and truapi_verifiable_bg.wasm beside its own files, which brings it to 2.64 MiB raw and 775 KiB brotli, down from 7.76 MiB and 5.40 MiB (feat(wasm): load verifiable on demand in the browser #922).
• Withdrawn requests stop on the host and over SSO (feat(server): stop a withdrawn call before it prompts, acts or reaches another party #927, feat(sso): let a withdrawal reach the paired host that is serving it #933).
• Built-in personhood ring keys are initialized for authorized products (fix: initialize built-in personhood keys #924).
• The embedding host supplies the wire debugger's dial (feat(truapi-host): host-supplied wire-debugger dial, plus a make debugger target #604), and the CLI streams to it with --debugger (feat(cli): stream product frames to a wire debugger behind --debugger #656).
• @parity/truapi-provider 0.2.2 builds smoldot's secp256k1 tables on first use, bringing the browser bundle to 0.94 MiB brotli (perf(provider): build smoldot's secp256k1 tables on first use in the browser #928).

@parity/truapi 0.21.0 also publishes the prebuilt truapi-host binaries.

Checklist

• Ran npm run changeset and selected the package + bump type (minor)
• Ran npm run version-packages to consume the changeset
• js/packages/truapi/package.json version is bumped
• js/packages/truapi-host/package.json version is bumped when releasing the host
• The PR title includes @parity/ios-host <version> when publishing the iOS host
• @parity/truapi-debugger bumps to 0.1.8 with the new dependency range; it is private and stays unpublished
• Regenerated iOS bindings and container outputs are committed; CI builds and simulator-tests the XCFramework, publishes it, then commits Package.swift
• The PR title includes @parity/android-host <version> when publishing the Android host AAR
• @parity/truapi-host depends on ^0.21.0
• js/packages/truapi/CHANGELOG.md has the new entry
• js/packages/truapi-host/CHANGELOG.md has the new entry
• rust/crates/truapi/Cargo.toml and rust/crates/truapi-host-cli/Cargo.toml versions match js/packages/truapi/package.json (npm run check-release-versions), and Cargo.lock records them
• Releasing @parity/truapi also publishes the prebuilt truapi-host binaries
• No leftover files under .changeset/ (other than config.json)

[johnthecat]

Superseded by #973: a release/ branch triggers the iOS app's TestFlight distribution.

[github-actions]

CI Status: 23 required jobs green, 21 passed and 2 skipped by path filter.

All job results

job	result
android-bindings	success
changes	success
changeset-guard	success
cli-package	success
codegen	success
e2e	skipped
explorer	success
headless-install	success
host-android-bindings	success
host-android-detekt	success
host-wasm	success
ios-bindings	success
ios-swift	success
licenses	success
playground	success
provider-android-bindings	success
release-guard	success
rust	success
ts-client	success
ts-debugger	success
ts-host	success
wasm-provider	success
workflow-lint	skipped

Signing credentials: failure as of 2026-09-24, a release may fail

_{Commit 8344fac3 · run log}