Trezor firmware

This commit changes how the Trezor firmware build system handles source-line information in its embedded MicroPython interpreter. Previously, enabling or disabling source-line data required rebuilding the MicroPython cross-compiler. After this change, the same compiler binary can include or omit source lines via a command-line flag. This is a build-system convenience and optimization; it does not fix a vulnerability in user-facing code.

This is a build-system cleanup for Trezor firmware. It removes an unused storage cache module from a specific firmware variant (THP builds) to save about 1 kB of flash space. The code change also makes sure that when the module is excluded, the few functions that relied on it are skipped too. There is no direct security bug here, but any build-system change that alters which code is compiled into a hardware wallet deserves a quick sanity check.

This commit fixes visual alignment of icons and text on the Trezor hardware wallet's homescreen for the Eckhart layout. It adjusts where the connection indicator and device label are drawn so they line up correctly with the battery icon. There is no security relevance in this change.

This commit changes a build script to use a more portable way of writing sed commands. It replaces a non-standard regular-expression feature with one that works on macOS. There is no security relevance: the change only affects how source code is preprocessed during firmware builds and does not alter runtime behavior or introduce any vulnerability.

This commit increases the secure monitor (secmont) stack size from 12 KB to 80 KB on Trezor hardware wallets and shifts memory layout to make room for it. A larger stack reduces the chance that a security-critical component runs out of memory and misbehaves, but the change itself is a routine resource adjustment, not a proven fix for an active attack. The commit does not describe any security bug or credit a researcher.

This commit is a routine localization update. It regenerates translation files so that some on-screen text strings are left blank for certain device models or languages while keeping them present for others. There is no code behavior change, no bug fix, and no security relevance.

This commit simply removes the repository's own SECURITY.md file and updates the README to point users to the organization's default security policy on GitHub instead. It is a documentation-only change with no code modifications and no direct security impact on the firmware or device.

This commit only changes a test file. It adjusts which hardware models and protocol versions skip a test that sends a large JPEG homescreen image in a single message. The change is not a fix to product firmware and does not address a security vulnerability.

This is a routine user-interface refactor for the Trezor hardware wallet firmware. It renames a parameter from 'warning_footer' to 'footer' and allows the footer text to be shown either as a warning (red/alert style) or as a normal informational hint. The change touches many UI test snapshots because screen layouts changed slightly, but there is no evidence of a security vulnerability or fix.

This is a user-interface consistency patch for the Trezor hardware wallet's 'Eckhart' design. It moves the 'cancel' option from a small 'X' button on the action bar into a menu, matching how the newer 'Delizia' design already works. There is no security bug being fixed here; it is purely a layout and navigation change.

This commit is a routine cleanup of unused text strings in the Trezor firmware's translation system. It removes labels like 'Enter', 'Sending from account:', and 'Good to know' from generated translation files because they are no longer used anywhere in the user interface. There is no change to security logic, cryptography, or device behavior.

This commit removes the project's custom Nix-based packaging for the Pyright type-checking tool and stops using that custom package in the developer shell. It is a build/development tooling cleanup, not a security fix or vulnerability. There are no changes to the Trezor firmware code that runs on devices or to user-facing applications.

This is a routine build-environment maintenance update. It refreshes the versions of two Nix package collections used by Trezor's developer shell and updates the `uv` Python packaging tool from 0.7.14 to 0.10.10. The change does not touch the firmware code, wallet logic, cryptography, or any user-facing security feature. There is no indication of a security vulnerability being fixed.

This commit is purely a code-style cleanup. It updates the project's C source files so they match the formatting rules of a newer version of the clang-format tool (version 21.1.8 instead of 17.0.6). The changes are limited to whitespace, line breaks, comment placement, and how macros and attributes are laid out. No program logic, security checks, or behavior were changed.

This commit removes a default value for the backup_method setting used during wallet recovery on Trezor devices. Previously, if a recovery app did not explicitly choose a backup method, the device would default to 'Display' (showing shares on screen). After this change, the device will ask the user to choose instead. This is a small user-experience and behavior change, not a fix for a known security vulnerability.

This commit adds a way for the Trezor host software (trezorctl) to tell the device which backup/recovery method to use during wallet recovery. Right now only the existing display-based method is actually supported; the new parameter is mainly plumbing so the host can skip an extra user-choice screen in future versions. There is no obvious security bug in the change itself.

This is an automated dependency update by Dependabot that bumps the Python 'cryptography' library from version 46.0.6 to 46.0.7 in the project's lock file. The change only updates recorded download URLs and cryptographic hashes for the new version. There is no indication in the commit itself that this fixes a known security vulnerability, and no security advisory was supplied. It is best treated as a routine maintenance patch.

This commit changes how Ethereum addresses are visually displayed on Trezor devices. When the optional 'chunkify' feature is enabled, the '0x' prefix is now shown as a separate chunk from the rest of the address, making it easier for users to read and verify addresses. There is no direct security vulnerability being fixed here; it is a user-interface improvement that may slightly reduce the chance of user verification mistakes.

This commit fixes a small user-interface bug in Trezor's Bluetooth pairing flow. Previously, if the device name was too long for the Bluetooth advertising packet, the user saw the full name on the Trezor screen while the truncated name was actually broadcast. Now the code returns the truncated name and displays that same shortened name to the user, so what they see matches what nearby devices see.

This commit only adds new test cases for Ethereum vault deposits. It does not change any production firmware code, so it cannot introduce a security vulnerability in the device itself. The new tests check both valid deposits and cases that should be rejected, such as sending native ETH along with a deposit or a malformed transaction.

This commit adds a new user-facing feature to Trezor hardware wallets: clear signing support for ERC-4626 'vault deposit' transactions on Ethereum. It introduces code that recognizes a specific smart-contract function call, shows the user a friendly confirmation screen with the vault name and deposit amount, and only proceeds if safety checks pass. There is no indication in the commit that this fixes a security bug; it appears to be a normal feature addition.

This is a routine user-interface cleanup change. It makes one button label parameter optional across several Trezor device layouts and updates the Python helper that calls it. There is no security-relevant behavior change: the same screens are shown, only the internal plumbing for deciding whether to display an extra 'info' button is simplified.

This commit is purely a documentation update for the Trezor firmware repository. It reorganizes existing documentation, adds new documentation for the Trezor-Host Protocol (THP), and moves Bitcoin signing and protocol v1 docs to new locations. No executable code, firmware logic, or security-sensitive behavior was changed.

This commit fixes a single grammar typo in a code comment. The word 'host' was changed to 'the host' in a protobuf message description. No code behavior, security logic, or functionality was changed.

This commit only adds a human-readable comment to a protobuf message definition. It does not change any code behavior, protocol logic, or security properties.