We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit only changes configuration files for a Python type checker (Pyright) and removes an outdated comment in setup.cfg. It bumps the declared Python version used for type checking from 3.10 to 3.12. There is no change to the actual …
9c1a3a7cby Martin Milata+2−43 filesThis commit changes how the Trezor firmware build and test tooling handles the Tropic secure-element emulator. Previously, Tropic support was disabled by default in Unix emulator builds and had to be explicitly enabled; now it is enabled b…
afb0fdd4by Martin Milata+303−30116 filesThis commit only fixes whitespace indentation in a Makefile. It moves a few conditional build-option lines from being indented with a tab to being flush-left, which is required for GNU Make to recognize them as part of the else branch rath…
b61fad10by Martin Milata+6−61 fileThis commit adds a new command-line option to the Trezor emulator that prints basic device information (model name, optional feature flags, and version number) as JSON and then exits. It also adds a Python helper to call this option. There…
35c98847by Martin Milata+49−03 filesThis commit changes test infrastructure so that the Tropic01 model (a separate emulator component) is only started when the Trezor emulator being tested actually supports it. Previously it was started by default. There is no indication thi…
eadb8c1aby Martin Milata+25−83 filesThis commit is purely cosmetic: it adjusts the spacing in a markdown table inside the SECURITY.md file so the columns line up visually. No code, keys, fingerprints, instructions, or security policy content were changed.
d5c64bafby Tim Ruffing+4−41 fileThis commit simply adds a new person's PGP key to the project's SECURITY.md file. It is an administrative documentation change with no code modifications and no security vulnerability.
9bd50f0cby Tim Ruffing+1−01 fileThis firmware update relaxes the rules for valid Ethereum typed-data (EIP-712) names so they can contain a colon (:), which some decentralized apps use as a namespace separator. Member names still cannot contain colons. The change is prese…
9703d8d9by Marko Bencun+50−43 filesThis commit changes the warning threshold that tells Bitcoin Core users when their database cache setting (-dbcache) is too large for their computer's RAM. Previously, the threshold jumped sharply at exactly 2 GiB of total RAM. The new for…
d164a043by Lőrinc+27−252 filesA Bitcoin Core developer removed their own DNS seed (seed.bitcoin.sipa.be, run by Pieter Wuille) from the list of hardcoded network seeds that help new Bitcoin nodes find peers when they first start up. This is a routine operational/mainte…
d9080639by Pieter Wuille+1−32 filesThis commit adjusts the project's continuous integration (CI) test script to pin an older version of a build-time helper crate called `jobserver` when using older Rust compilers. It is a build compatibility fix, not a security patch, and d…
a4641403by Matt Corallo+3−01 fileThis commit updates a dependency used to talk to Esplora blockchain servers from version 0.12 to 0.13, switching the underlying HTTP library from reqwest to bitreq. It also removes two CI workarounds that pinned older versions of idna_adap…
5cd499e0by Matt Corallo+1−72 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.