Trezor firmware

This is a small user-interface cleanup for the Trezor hardware wallet's Delizia layout. It makes confirmation screens skip drawing an empty footer button label when no button text is provided. There is no indication this fixes a security bug; it appears to be a visual polish change.

This commit is a user-interface cleanup in the Trezor firmware's 'Caesar' layout. It replaces several hard-coded 'i' text labels with a shared 'info icon' helper and adds support for a down-arrow icon. There is no change to cryptographic operations, memory safety, authentication, or data handling. It appears to be a non-security refactor.

This commit only adds two new English text labels, 'Confirm all' and 'Show next', to the Trezor firmware's translation system. It updates the generated code that maps internal keys to user-visible strings and refreshes the translation signature metadata. There is no change to security logic, user prompts, or how confirmations work.

This is a routine build-file update that records a new release of Trezor's own Python library (trezorlib), bumping the version from 0.20.0 to 0.20.1. The change is in a lock file only and contains no code modifications. There is no security-relevant content visible in the commit.

This commit is a small internal code cleanup in Trezor's Ethereum transaction signing code. It changes a function that detects and handles Ethereum staking transactions from an 'async' (pause-able) style to a regular function that returns a confirmation task. There is no visible change in behavior, no bug fix, and no security-relevant change described by the vendor.

This commit simply adds a single line to a documentation file listing Sparrow Wallet as a third-party wallet that uses no Trezor libraries. It is a non-code documentation change with no security relevance.

This commit adds a helper script and a rules file for managing translated text in Trezor firmware. The script blanks out translation strings that do not apply to specific hardware layouts (e.g., removing Bluetooth-related text for devices that lack Bluetooth). It is a build/translation tooling change and does not modify device firmware code, cryptographic operations, or security-sensitive logic.

This commit is a routine maintenance update to the translation tooling for Trezor hardware wallets. It adds and reorganizes rules that decide which on-screen text strings appear on which device models (Bolt, Caesar, Delizia, Eckhart). There is no indication of a security fix, vulnerability, or exploit.

This commit is a routine localization update. It blanks out many English strings in the translation file and regenerates the Rust translation table and mock stubs accordingly. There is no code behavior change, no bug fix, and no security fix.

This commit simply deletes a Cargo.lock file from a Rust subproject. A Cargo.lock pins exact versions of dependencies. Removing it does not change any source code and does not, by itself, introduce a vulnerability. It means future builds of this subproject will resolve dependency versions from Cargo.toml constraints rather than fixed lockfile versions, which can affect reproducibility and supply-chain risk but is a routine project-maintenance decision, not a security defect.

This commit only adds error log messages to an internal Rust library (trezor-thp) used by Trezor hardware wallets. It does not change any security logic, parsing rules, or behavior. The same error conditions were already being returned before; now they also print a short diagnostic message. There is no indication this fixes or introduces a security vulnerability.

This commit adds a new secure communication layer to the Trezor hardware wallet's Rust protocol library. It introduces encrypted channels, handshake logic, and credential handling. The change is a feature implementation rather than a documented security fix, but it touches sensitive cryptography and transport code, so correctness matters for device security.

This commit adds example code and development tooling for the Trezor THP (Trezor Host Protocol) Rust library. It is a feature addition containing example clients, generated protobuf bindings, and a renamed example. There is no indication this commit fixes or introduces a security vulnerability in the firmware itself.

This is a code cleanup in the Python Trezor library that reorganizes how device authenticity checks handle public keys and signatures. It does not change the security behavior visible to users; it only moves existing logic into new helper classes to make future cryptography upgrades easier. There is no indication this fixes a security bug or introduces a vulnerability.

This commit improves how Trezor's Python library handles the list of trusted certificate authorities used to verify a device is genuine. Previously, if the online allowlist could not be downloaded, the tool might fail in an uncontrolled way. The change adds proper error handling and renames 'whitelist' to the more general 'allowlist' to support both approved and revoked (blacklisted) public keys. It also renames the user-facing option from --skip-whitelist to --offline. There is no direct evidence in the commit that this fixes an active security vulnerability, but it hardens the device-authentication process.

This commit tightens device authentication checks in Trezor's Python library. Previously, if a hardware wallet returned a Tropic signature, it was verified. Now, the library also raises an error if a Tropic signature is expected (because an Ed25519 root public key is configured) but missing. This prevents a device from skipping a required signature check and being accepted as authentic.

This commit updates the list of trusted public keys used by Trezor's Python library to authenticate genuine Trezor hardware. It adds the official production key for a new device model (T3B1, sold as Trezor Safe 3) and renames an older internal model name (T3W1) to its marketed name (Trezor Safe 7). There is no indication of a security vulnerability; it is routine key inventory maintenance for a new product variant.

This commit simply increases the version number of the Python Trezor library from 0.20.0 to 0.20.1 after a release. It changes one line in a packaging metadata file and has no security relevance.

This commit fixes a single spelling mistake in a documentation string inside a Python source file. It changes 'registred' to 'registered' in a comment describing what a function does. There is no code behavior change and no security relevance.

This commit fixes two macOS-specific compatibility issues in the Python Trezor library's Bluetooth Low Energy (BLE) transport code. It makes BLE pairing and firmware installation work on Apple computers by handling a missing macOS pairing function and switching to a more reliable write mode on that platform. There is no indication this is a security vulnerability fix.

This commit is purely a documentation update that generates the changelog for the Python trezorlib package version 0.20.0. It deletes small changelog fragment files and merges their contents into the main CHANGELOG.md, plus updates the command-line help documentation. No actual source code, firmware, or security logic is changed.

This commit only updates a test data file (fixtures.json) used for automated UI testing. It replaces expected screen-shot hashes with new ones, matching a routine refresh of test baselines. No firmware code, no user-facing behavior, and no security-sensitive logic was changed.

This commit changes two UI layout functions so that the `total_amount` parameter can accept a null/missing value in addition to a string. It is a small type-signature relaxation with no visible behavior change in the diff. There is no direct evidence in the commit that this fixes an exploitable security vulnerability; it is most likely a defensive fix for a UI crash or type mismatch when a transaction total is not available.

This commit only updates test helper code in tests/input_flows.py. It renames a helper method and changes which on-screen text labels the tests look for, matching the tests to updated wording in the device firmware's user interface. There is no change to the actual Trezor firmware or wallet logic, so it has no security relevance for end users.

This commit only adds keyboard shortcuts (j/k to scroll, p/n for previous/next case) to a local test-report web page used by Trezor developers during UI testing. It does not touch wallet, firmware, or cryptographic code and has no security relevance for end users.