0.12.0: bump upstream to @novasamatech/*@^0.9.1

[eugypalu]

Cause. truapi 0.5 adopted RFC-0022: DerivationIndex went from a bare u32 to Enum{Index(u32), Raw([u8; 32])}. This SDK was pinned to @novasamatech/*@^0.8.8, where it is still a u32, so the two sides disagreed by one tag byte. The failure is silent — the wrong account for any index other than 0, signRaw over the empty payload instead of the requested bytes, and createTransaction dropped without a reply, which is why every test that submits a transaction hung until its timeout.

Fix. Bump @novasamatech/* to ^0.9.1 and @parity/truapi to ^0.6.0, then adapt the handlers: a selectorKey() helper threaded through the product-account call sites, plus the new shapes for handleAccountGetAlias (request + GetAliasErr) and handleAccountCreateProof (struct response). Index(n) renders as the plain n, so productAccounts keys and derived addresses are unchanged.

Breaking. Products on host-api-wrapper@^0.8.x no longer talk to this host — upgrade both sides in lockstep, same as 0.9.0. ProductAccount also loses name, a field the protocol struct never had.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​novasamatech/​host-api-wrapper@​0.9.1
	@​novasamatech/​host-container@​0.9.1
	@​novasamatech/​host-api@​0.9.1
	@​parity/​truapi@​0.6.0

View full report