TZ
← All projectsTrezor

Trezor firmware

Firmware monorepo for Trezor One, Model T, and Safe devices.

BitcoinHardware walletsNormal
Repository coverage

2667 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

921security candidates311second-pass queue2660AI analyses
319commits · 30 days
548commits · 60 days
1354commits · 180 days
2638commits · 365 days
Backfill bands
Aug 5 → Feb 61298 seen115 candidatesComplete
Feb 6 → Jun 6775 seen58 candidatesComplete
Jun 6 → Jul 6217 seen13 candidatesComplete
Jul 6 → Aug 5360 seen54 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

66/100 average clarity
478Strong · 80–100
1321Adequate · 60–79
863Thin · 40–59
5Opaque · 0–39
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
tychovrahe292104292461
Roman Zeyde577181575272
PrisionMike945994273
Andrew Kozlik712470265
obrusvit21376213164
Jakub Janků22919182
Martin Pastyřík23823173
cepetr19682196059
Ioan Bizău23076230059
M1nd3r20772207071
Lukas Bielesch846784067
Martin Milata17446174063
Analysis record

Published AI watches

Last scanned 52 minutes ago

Low 27 AI analysisMessage 93 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core): digest EIP-1559/EIP-7702 magic without RLP encoding

This commit is a small internal cleanup in Trezor's Ethereum signing code. It changes how two special 'magic' bytes (the transaction type markers for newer Ethereum transaction formats) are fed into the cryptographic hash. Previously the c…

Refactor of cryptographic hashing path for Ethereum transaction signingRemoval of implicit assumption that RLP encodes small integers as single bytesChange affects EIP-1559 and EIP-7702 transaction type markers
2362bc6fby Roman Zeyde+6−32 files
No security note in commit
Informational 15 AI analysisMessage 98 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

test(core): test RLP self-encoding bytestrings

This commit only adds a new unit test to the Trezor firmware codebase. It verifies that very short Ethereum RLP-encoded byte strings and small positive integers encode to themselves, which is a known property of the RLP specification. No p…

41538733by Roman Zeyde+16−01 file
No security note in commit
Informational 18 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): remove sha1 from regular FW

This commit removes the SHA-1 hashing function from the regular Trezor firmware. SHA-1 is an old, weak hash algorithm that is no longer considered secure for sensitive uses. The change deletes the code that exposes SHA-1 to apps running on…

Removal of a deprecated cryptographic primitive (SHA-1) from the firmware API surfaceReduction of attack surface and prevention of future misuse of a collision-vulnerable hashNo direct vulnerability patch or memory-safety bug is present in the diff
16d15774by M1nd3r+0−2006 files
No security note in commit
Low 27 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): pass static public key to `noise_xxpsk3_*_init()`

This commit changes how a cryptographic library sets up secure connections. Previously, the code automatically calculated the public key from the private key. Now, the caller must provide the public key directly. This is a code-quality ref…

Cryptographic key handling changed: public key is now supplied rather than derivedPotential reduction of key-mismatch risk if caller provides correct public keyNew null-pointer check added for static_public_key
1b3128a4by Ondřej Vejpustek+20−92 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): change order of parameters

This commit simply reorders the arguments of an internal function called dh() and updates every place that calls it. The actual math and security behavior are unchanged; it is a code cleanup with no security effect.

33a119eeby Ondřej Vejpustek+15−151 file
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): prefix enums

This commit simply renames two groups of internal status labels (called enums) in the Trezor firmware's cryptographic code. The old names like WAITING_FOR_REQUEST1 were shared between two different parts of the code, so the developer gave …

f1c74046by Ondřej Vejpustek+26−222 files
No security note in commit
Low 37 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(crypto): prevent calling `memzero(NULL, ...)`

This commit fixes three places in the Trezor firmware's cryptographic code where a memory-clearing function could be called with a NULL pointer. In practice, passing NULL to memzero is harmless on Trezor's platform (it does nothing), but i…

NULL pointer passed to memory-zeroing helper in cryptographic codeUndefined behavior in C standard library contractDefensive hardening in Noise protocol implementation
0394e934by Ondřej Vejpustek+11−51 file
No security note in commit
Informational 18 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(crypto): return remote static key from `noise_xxpsk3_*_handle_*()`

This commit is a code cleanup (refactor) for the cryptographic handshake code used in Trezor devices. It changes how the other party's long-term public key is returned to the caller: instead of storing it inside an internal state structure…

Removal of long-term public key storage from internal handshake stateCaller-supplied output buffer for remote static public key reduces internal secret retentionError-path memzero of returned key material on failure
3ead1aa6by Ondřej Vejpustek+79−423 files
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): rename ProjectProfile to ProjectConfig

This commit is a simple rename from 'ProjectProfile' to 'ProjectConfig' in two Rust source files. It only changes variable names, struct names, and error messages. There is no change to program logic, security behavior, or how data is hand…

581b37bcby cepetr+18−182 files
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): introduce ResolvedBuildArgs

This commit is a straightforward internal code refactor in Trezor's build tooling. It introduces a new ResolvedBuildArgs structure that centralizes default values for command-line build options before they are used. There is no change to u…

c24d1be8by cepetr+99−295 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): make build args tristate

This commit is a straightforward internal refactor of the Trezor firmware build tool's command-line argument handling. It changes many on/off flags from plain booleans to optional booleans so they can explicitly be set to true, false, or l…

271e249aby cepetr+57−561 file
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): introduce build options

This commit is a straightforward internal code reorganization in Trezor's build tooling. It moves build-option definitions from one Rust source file to a new module and adds the ability to load those options from a configuration file. Ther…

75085e2aby cepetr+275−2007 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(xtask): introduce build presets

This commit is a developer tooling change for the Trezor firmware build system. It introduces 'build presets'—named configuration bundles stored in TOML files—so developers can select common build settings with a single command-line flag i…

eefe8f7fby cepetr+397−419 files
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(xtask): upgrade manifest.yaml for tf-tools 0.3.0

This commit is a routine update to a build-system manifest file used by Trezor's internal tooling. It reorganizes and re-labels feature flags (for example, moving options between 'Features', 'Debugging', and 'Signing' groups and simplifyin…

57b28b89by cepetr+86−1351 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): add tf-tools 0.3.1+ configuration file

This commit adds a single configuration file for a Trezor developer tool (a VS Code extension). It only points the tool to existing folders in the repository and contains no executable code, no secrets, and no changes to firmware behavior.…

e554f618by cepetr+8−01 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): rename ResolvedBuild to ResolvedBuildFeatures

This commit is a simple internal code cleanup: it renames a Rust data structure called ResolvedBuild to ResolvedBuildFeatures and updates the places that use it. There are no functional changes, no security fixes, and no changes to how the…

aaa2780bby cepetr+5−52 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): fix up clippy warnings in storage.rs

This is a tiny code cleanup commit that replaces two calls to `ptr::null()` with Rust's `unwrap_or_default()` to silence automated Clippy lint warnings. It does not change what value is produced (still a null pointer when no salt is provid…

62354461by cepetr+2−21 file
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(xtask): simplify dependencies

This commit is a straightforward internal code cleanup in Trezor's build tooling. It moves a data structure and two helper methods from one Rust source file to another and updates callers accordingly. There is no change to user-facing beha…

6268349fby cepetr+9−193 files
No security note in commit
Informational 15 AI analysisMessage 47 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

docs: add xtask documentation

This commit only adds documentation. It updates the table of contents and adds a new markdown page plus a diagram explaining the project's 'xtask' build helper. No code, build scripts, or firmware logic was changed, so it cannot introduce …

4879dababy cepetr+296−03 files
No security note in commit
Informational 17 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(xtask): introduce project-toml build-options

This commit is a build-system refactoring for Trezor firmware. It moves the mapping of command-line build options to Rust/cargo features out of hard-coded Rust logic and into per-project TOML files. It also adds a small change so debug bui…

Build-option mapping now lives in project.toml files, increasing the attack surface for supply-chain/build-configuration tamperingMakefile change automatically enables debug-link for PYOPT=0 debug buildsValidation added to reject storage_insecure_testing_mode in production builds
d44de007by cepetr+681−40817 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedchore(core): remove italian localizationby obrusvit · 4b691a3e · Nov 7, 2025 · 29 filesMessage 57 · ThinInformational 15Details
Commit message · obrusvit

chore(core): remove italian localization

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: unusually broad changesecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit simply removes the Italian language translation files and related font glyph definitions from the Trezor firmware. It is a routine localization cleanup with no security relevance. No code that handles cryptography, authentication, or device security is changed.

Lower-priorityfeat(core/embed): introduce tropic progress in `lt_port_delay()`by Ondřej Vejpustek · 40dffd11 · Nov 7, 2025 · 3 filesMessage 62 · AdequateInformational 15Details
Commit message · Ondřej Vejpustek

feat(core/embed): introduce tropic progress in `lt_port_delay()`

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a user-interface improvement for the Tropic secure chip integration. It moves progress-bar updates so they happen automatically during built-in hardware delays, rather than being sprinkled manually around cryptographic operations. There is no security vulnerability here; it is a code-quality and UX refactor.

Security candidatechore: bump versionsby Roman Zeyde · 42b26bfd · Nov 7, 2025 · 12 filesMessage 55 · ThinInformational 15Details
Commit message · Roman Zeyde

chore: bump versions

core -> 2.9.5
bootloader -> 2.1.15
prodtest -> 0.3.6
secmon -> 1.0.4

[no changelog]

55/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope✓ Provides an explanatory body
Why it was queued
update trustsigning or wallet pathboot or update path
AI analysis · Informational 15/100

This commit only updates version numbers and translation metadata. It does not change any program logic, fix any bug, or alter any security behavior. There is nothing here that could directly affect security.

Lower-priorityrefactor: use create_connectionby Ioan Bizău · cc7978f6 · Nov 6, 2025 · 1 fileMessage 47 · ThinInformational 15Details
Commit message · Ioan Bizău

refactor: use create_connection

[no changelog]

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This is a small internal code cleanup in the Trezor firmware test tooling. It replaces a manual socket creation and connection check with Python's built-in `socket.create_connection` helper. There is no security-relevant change: the code still only connects to the local emulator on a fixed loopback address (127.0.0.1), and the behavior is functionally equivalent.

Lower-prioritychore: remove sleepby Ioan Bizău · c06cf9b2 · Nov 6, 2025 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · Ioan Bizău

chore: remove sleep

[no changelog]

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit removes a 2-second delay in internal test code that waits for a Trezor emulator component to be ready. It is a test/development tooling change with no apparent security relevance.

Lower-priorityci: fix crowdin push directoryby obrusvit · af302850 · Nov 6, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · obrusvit

ci: fix crowdin push directory

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This is a routine CI workflow fix that changes the directory path used by an automated translation-pushing job. It has no security relevance for users of Trezor devices or the firmware itself.

AI review queuedchore(core): remove Bolt-specific stringsby obrusvit · 985835f4 · Nov 5, 2025 · 6 filesMessage 80 · StrongInformational 18Details
Commit message · obrusvit

chore(core): remove Bolt-specific strings

- these strings are specific for reset flow in Bolt layout, remove them
from other layouts.
- done to reduce size of translation blobs

[no changelog]

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathtranslation-only discountsecond-pass: security-sensitive path
AI analysis · Informational 18/100

This commit is a routine cleanup of translation files for the Trezor hardware wallet firmware. It removes or empties text strings used only by the older 'Bolt' user-interface layout from newer layouts (Caesar, Delizia, Eckhart) to make translation files smaller. There is no code change, no security fix, and no vulnerability introduced.

Lower-prioritychore(tests): update UI fixturesby Martin Pastyřík · ebc9f60f · Nov 5, 2025 · 1 fileMessage 67 · AdequateInformational 15Details
Commit message · Martin Pastyřík

chore(tests): update UI fixtures

[no changelog]

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only updates a test data file (fixtures.json) that stores expected screen snapshots for automated UI tests. It adds new expected images for recently added or renamed 'evolu' tests and removes old expected images for a renamed test. There are no changes to the actual Trezor firmware code, so this cannot affect device security or user funds.

Security candidatefeat(core): functions for Evolu spam protectionby Martin Pastyřík · d2516f1d · Nov 5, 2025 · 60 filesMessage 57 · ThinLow 45Details
Commit message · Martin Pastyřík

feat(core): functions for Evolu spam protection

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathboot or update pathauthentication path
AI analysis · Low 45/100

This commit adds new Trezor firmware features for an 'Evolu' / 'Suite Sync' service. It introduces a device-bound delegated identity key, a way to export that key after user confirmation, and ways to prove possession of that key to request a SLIP-21 node or to sign a registration request with the device's Optiga certificate. The change is framed by the vendor as spam protection / anti-abuse functionality, not as a security fix. The commit itself is a feature implementation, but it touches sensitive areas: key derivation from a new per-device master secret, secure-monitor/kernel syscalls for reading a private key, and user-consent flows for exporting a private key.

AI review queuedfix(ui): break on unitby Ioan Bizău · c1559ce8 · Nov 5, 2025 · 6 filesMessage 50 · ThinInformational 15Details
Commit message · Ioan Bizău

fix(ui): break on unit

[no changelog]

50/100 · ThinMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a cosmetic user-interface change. It replaces a non-breaking space between a number and its unit (like '1.23 BTC') with a regular space so the unit can wrap to the next line on small screens. There is no security impact.

Security candidatefix(eckhart,stellar): updated font for stellar amount and bitcoin lock timeby PrisionMike · 0143345e · Nov 4, 2025 · 4 filesMessage 85 · StrongInformational 15Details
Commit message · PrisionMike

fix(eckhart,stellar): updated font for stellar amount and bitcoin lock time

Fix stellar amount font on T3W1
Fixes #6109
Also updates Bitcoin lock datetime font.

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
boot or update path
AI analysis · Informational 15/100

This commit is a visual/UI-only fix for the Trezor T3W1 hardware wallet. It changes the font used to display Stellar transaction amounts and Bitcoin lock times on the device screen. There is no change to security logic, cryptography, transaction validation, or how the device signs anything. The only code changes are selecting a different font style and updating the corresponding screen snapshot hashes used by automated tests.

Security candidateRevert "chore: remove `GetNonce` and `PaymentRequest` from experimental features"by Roman Zeyde · 366580dc · Nov 4, 2025 · 24 filesMessage 65 · AdequateInformational 21Details
Commit message · Roman Zeyde

Revert "chore: remove `GetNonce` and `PaymentRequest` from experimental features"

This reverts commit 6b844d37489d79e88d1cec6a443fe550a5f6469d.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
nonce handlingcryptography-sensitive pathsigning or wallet path
AI analysis · Informational 21/100

This commit is a simple revert that puts two features—PaymentRequest and GetNonce/Nonce—back into the 'experimental' category in Trezor's protocol definitions. It does not fix or introduce a security bug; it just re-labels fields and messages as experimental again and updates generated code and tests accordingly. The change is administrative: it re-enables the experimental flag so these features are only usable when a device has experimental features turned on.

Security candidatechore(eckhart): make warning button multi lineby Ioan Bizău · 4231c563 · Nov 4, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · Ioan Bizău

chore(eckhart): make warning button multi line

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
boot or update path
AI analysis · Informational 15/100

This is a trivial user-interface layout change. It switches one button in a warning screen from a single-line text button to a multi-line text button so longer button labels can wrap. There is no security relevance in the code change itself.

Lower-prioritychore(core): DE translations fixesby PrisionMike · b38cfb66 · Nov 4, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · PrisionMike

chore(core): DE translations fixes

Contributing change to main PR #6078 which should have the changelog.
[no changelog]

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
translation-only discount
AI analysis · Informational 15/100

This commit only changes German translation strings in a JSON file. Some translations are simplified from per-device variants to a single string, and one string is split into per-device variants. There is no code behavior change, no security fix, and no vulnerability.

Lower-priorityfix(translations): double line-break instead of carriage returnby PrisionMike · 2a03cb1f · Nov 4, 2025 · 1 fileMessage 62 · AdequateInformational 15Details
Commit message · PrisionMike

fix(translations): double line-break instead of carriage return

[no changelog]

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
translation-only discount
AI analysis · Informational 15/100

This commit changes a single German translation string in the Trezor firmware. It replaces a double line-break with a carriage return in the on-device tutorial text that teaches users how to press buttons. There is no security relevance: it is a cosmetic text formatting fix for user-facing instructions.

Lower-prioritychore(core): ES translations fixesby Roman Zeyde · 99101cef · Nov 4, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · Roman Zeyde

chore(core): ES translations fixes

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
translation-only discount
AI analysis · Informational 15/100

This commit only updates Spanish translation strings in a JSON file. It fixes wording, capitalization, abbreviations, and adds a few per-device (Bolt/Caesar/Delizia/Eckhart) translation variants. There are no code changes, no security logic changes, and no functional behavior changes.

Lower-prioritychore(core): PT translations fixesby Ioan Bizău · d6c7cf38 · Nov 4, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · Ioan Bizău

chore(core): PT translations fixes

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
translation-only discount
AI analysis · Informational 15/100

This commit only updates Portuguese language translations in a JSON file. It shortens or rephrases text strings for different Trezor device models (Bolt, Caesar, Delizia, Eckhart) so they fit on screen better. There are no code changes and no security impact.

Lower-prioritychore(core): Crowdin full syncby obrusvit · a5cef59d · Nov 4, 2025 · 5 filesMessage 57 · ThinInformational 15Details
Commit message · obrusvit

chore(core): Crowdin full sync

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
translation-only discount
AI analysis · Informational 15/100

This commit is a routine translation update for the Trezor firmware user interface. It only changes translated text strings in Czech, German, Spanish, French, and Portuguese language files. There is no code change, no security fix, and no vulnerability introduced.

Lower-prioritychore(core): CS translations fixesby Martin Milata · fe03ed2e · Nov 4, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · Martin Milata

chore(core): CS translations fixes

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
translation-only discount
AI analysis · Informational 15/100

This commit only updates Czech translation text for one on-screen message, splitting a single phrase into different wording for different Trezor device models. There is no code change, no security logic change, and no vulnerability.

Lower-prioritychore(core): FR translations fixesby obrusvit · 8e1d7150 · Nov 4, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · obrusvit

chore(core): FR translations fixes

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
translation-only discount
AI analysis · Informational 15/100

This commit only updates French translation strings in a JSON file. It shortens some phrases for smaller Trezor device screens (Bolt, Caesar models) and makes minor wording tweaks. There are no code changes, no security fixes, and no behavior changes.

Lower-prioritychore: update fixturesby obrusvit · 480ec0aa · Nov 4, 2025 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · obrusvit

chore: update fixtures

[no changelog]

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only updates a large JSON file of test fixtures—essentially recorded screenshots or hashes used by automated UI tests. The values changed because the expected on-screen output changed, likely due to an unrelated code or translation update. There is no actual firmware code change here, so it cannot introduce a security vulnerability by itself.

AI review queuedchore: add characters to PT fontby Ioan Bizău · 085f973c · Nov 4, 2025 · 23 filesMessage 57 · ThinInformational 15Details
Commit message · Ioan Bizău

chore: add characters to PT font

[no changelog]

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
second-pass: unusually broad change
AI analysis · Informational 15/100

This commit adds two missing Portuguese characters, 'À' and 'ª', to the device's font files and fixes a spelling typo in a code generator file ('portugese' to 'portuguese'). It is a routine localization/typography update with no security relevance.

AI review queuedchore: make genby obrusvit · 3ef747bc · Nov 4, 2025 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · obrusvit

chore: make gen

[no changelog]

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathtranslation-only discountsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only updates a generated metadata file (signatures.json) that records the latest approved translation bundle for the Trezor device. It changes a timestamp, commit hash, and Merkle root pointer. There is no code change and no security-relevant behavior change visible in the diff.

Lower-prioritychore: update uv.lockby Roman Zeyde · 5f1b1e11 · Nov 3, 2025 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · Roman Zeyde

chore: update uv.lock

[no changelog]

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This is a routine dependency lock-file update. It changes the recorded version of Trezor's own Python package from 0.14.0 to a development version 0.20.0.dev0, renames an optional Bluetooth extra from 'bleak' to 'ble', and adds pre-built Windows wheel files for Python 3.14 for several supporting libraries. There is no indication of a security fix or vulnerability.

Lower-prioritychore(changelog): added changelog 6032by PrisionMike · f3e407a9 · Nov 3, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · PrisionMike

chore(changelog): added changelog 6032

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only adds a one-line changelog note saying a warning screen was removed for some non-ERC20 contract calls. It contains no code changes, so it cannot by itself introduce or fix a security vulnerability. The actual functional change is in some other commit that is not supplied here.