paritytech · valentinfernandez1 · Jul 16, 2026 · Jul 16, 2026
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/js/packages/truapi-host/package.json b/js/packages/truapi-host/package.json
@@ -49,7 +49,7 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@parity/truapi": "^0.4.0"
+    "@parity/truapi": "^0.4.1"
   },
   "devDependencies": {
     "@types/bun": "^1.3.0",

diff --git a/js/packages/truapi/CHANGELOG.md b/js/packages/truapi/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @parity/truapi
 
+## 0.4.1
+
+### Patch Changes
+
+- Treat Firefox's masked `"null"` `location.ancestorOrigins` entries as an unknown host origin in the sandbox bootstrap. The ready ping falls back to the source-checked wildcard instead of throwing `SyntaxError: An invalid or illegal string was specified`, which left iframe-hosted products permanently offline in Firefox.
+
 ## 0.4.0
 
 ### Minor Changes

diff --git a/js/packages/truapi/package.json b/js/packages/truapi/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@parity/truapi",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "TrUAPI TypeScript transport, SCALE codecs, and generated API client",
   "license": "MIT",
   "author": "Parity Technologies <admin@parity.io>",

diff --git a/package-lock.json b/package-lock.json
diff --git a/rust/crates/truapi/Cargo.toml b/rust/crates/truapi/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "truapi"
-version = "0.4.0"
+version = "0.4.1"
 edition.workspace = true
 license.workspace = true
 description = "TrUAPI trait and type definitions"