Passport firmware

This commit makes the Passport hardware wallet automatically create a backup after the user renames the device. The change is a functional improvement to ensure the new device name is preserved in backups, not a fix for an exploitable security flaw. There is no indication of a vulnerability or attack scenario.

This commit changes a Rust build setting so that debug information is no longer removed from the released firmware. On its own, this is a build/debugging convenience change, not a security fix. It does not patch any vulnerability, change runtime behavior, or introduce a known exploit path.

This commit only updates developer documentation to say Ubuntu 24.04 is required and adds a command-line flag to silence a deprecation warning in a license-checking tool. It does not change any firmware code, build outputs, or security behavior.

This commit updates several Rust library dependencies used in the Passport hardware wallet firmware and makes small code adjustments to match the new library versions. The most notable change is in the cryptographic signing code, where the code no longer wraps the data in a 'Message' object before creating a Schnorr signature. On its own, this looks like a routine compatibility update, but because it touches security-critical code (digital signatures), it warrants careful review to ensure the new calling pattern is safe and does not bypass any intended message-validation step.

This commit is a bulk update of the company's contact email address in copyright headers and documentation. It replaces 'hello@foundationdevices.com' with 'hello@foundation.xyz' across 728 files. There are no code logic changes, no security fixes, and no functional changes to the firmware.

This commit adds a new menu option that lets users sign a message using a file stored on a microSD card, alongside the existing option to sign by scanning a QR code. It reuses the same internal signing logic that was already used for health checks, just with different on-screen labels and file filters. There is no indication in the code that this weakens security or introduces a vulnerability; it appears to be a normal feature addition.

This commit simply updates a GitHub Actions linting tool (fsfe/reuse-action) from version 2 to version 4. It only affects the project's automated license/copyright compliance check and does not change any firmware code, build outputs, or user-facing behavior. There is no security relevance visible in the commit.

This commit updates the project's build environment from Ubuntu 20.04 to Ubuntu 24.04 in its GitHub Actions CI workflow and Docker container. It also switches the 'reuse' license-compliance tool from being installed via Python's pip to being installed as a standard Ubuntu package. This is a routine maintenance change. It does not by itself fix a known security vulnerability, but staying on a newer, supported operating-system base reduces long-term risk from outdated dependencies and avoids the end-of-life status Ubuntu 20.04 will reach in April 2025.

This commit simply updates the project's declared minimum Rust compiler version from 1.70.0 to 1.77.1 in CI configuration files and a Dockerfile. It does not change any firmware source code, fix a vulnerability, or alter product behavior. It is a routine build-environment maintenance change.

This commit adds compiler debugging symbols to the firmware build and uploads the resulting ELF file as a build artifact. It does not change the shipped firmware binary, runtime behavior, or introduce any security weakness. It is a developer convenience change.

This commit simply updates a GitHub Actions helper used to build Docker images from version 5 to version 6. There is no indication of a security fix or vulnerability in the change itself.

This commit removes one unused Python import (`import passport`) from a UI icon component. It is a routine code cleanup with no functional or security effect.

This commit simply replaces the Casa logo/icon artwork used in the Passport firmware's user interface. It updates both color and black-and-white versions of the icon and adjusts the image format from 2-bit indexed color to 1-bit indexed color for the monochrome variant. There is no security-relevant change.

This commit is a purely cosmetic UI tweak. It adds a tiny one-pixel bottom padding to the Casa icon in the extensions menu on color-screen Passport devices so the icon lines up better visually. There is no security relevance.

This commit is a purely cosmetic UI tweak. It nudges the Casa logo down by one pixel in card headers on color-screen Passport devices so it lines up better visually. There is no security relevance.

This commit adds support for exporting wallet data to a new software wallet called Bull Bitcoin. It is a straightforward feature addition with no visible security-relevant changes. There is no indication of a vulnerability, bug fix, or security patch.

This commit only changes a version number in a text file from 2.3.9 to 2.3.10. There is no code change, no security fix, and no functional change visible in the diff.

This commit increases the keypad debounce time from 20 to 120 time units. Debouncing is a normal hardware/software fix to prevent a single physical button press from being registered multiple times. The change is very small and routine, with no direct evidence of a security vulnerability.

This commit simply rearranges the on-screen keypad layout in a hardware wallet test screen so that new counter elements fit. It changes spacing, widths, and positions of on-screen buttons. There is no security relevance.

This commit changes the on-screen keypad display to show a small counter next to each key label, tracking how many times the key has been released. It is a UI/debugging enhancement with no apparent security relevance.

This commit changes the colors used in a factory-style keypad test screen and adds a new way to exit the test by pressing the Enter key five times. There is no security-relevant change visible in the diff.

This commit simply deletes a README file that described a factory testing feature. No code, firmware, or security controls were changed. The file itself was documentation and appears to have been added by mistake. There is no direct security impact from removing it.

This commit adds documentation for a factory test mode and improves the on-screen keypad test so it shows different colors when keys are pressed and released. It is a routine manufacturing/quality-assurance change with no security relevance.