Trezor firmware

This commit only updates a generated metadata file (signatures.json) that records the latest approved translation bundle for the Trezor device. It changes a timestamp, commit hash, and Merkle root pointer. There is no code change and no security-relevant behavior change visible in the diff.

This commit only updates Portuguese language translations in a JSON file. It shortens or rephrases text strings for different Trezor device models (Bolt, Caesar, Delizia, Eckhart) so they fit on screen better. There are no code changes and no security impact.

This is a trivial user-interface layout change. It switches one button in a warning screen from a single-line text button to a multi-line text button so longer button labels can wrap. There is no security relevance in the code change itself.

This is a routine dependency lock-file update. It changes the recorded version of Trezor's own Python package from 0.14.0 to a development version 0.20.0.dev0, renames an optional Bluetooth extra from 'bleak' to 'ble', and adds pre-built Windows wheel files for Python 3.14 for several supporting libraries. There is no indication of a security fix or vulnerability.

This commit only adds a new test case for Ethereum transactions. It does not change any production code, so it cannot directly introduce or fix a security vulnerability. The test checks how the device displays a transaction when the called function, token, and blockchain are all unknown. The commit message hints at a user-interface design concern—avoiding unnecessary warning screens so users don't learn to ignore them—but that concern is not implemented in this change.

This commit only adds a one-line changelog note saying a warning screen was removed for some non-ERC20 contract calls. It contains no code changes, so it cannot by itself introduce or fix a security vulnerability. The actual functional change is in some other commit that is not supplied here.

This commit tightens how a Trezor hardware wallet decides whether an Ethereum transaction is a standard ERC-20 token transfer/approval. Previously the code guessed based on the transaction's overall shape and size; now it also checks the actual function signature bytes. The change removes an assumption that any matching transaction must be either a transfer or approval, which could have led the device to display a token-style confirmation for contract calls that only happened to look similar. There is no public claim that this was exploited, and the commit does not label itself as a security fix.

This commit simply swaps in a newer pre-built bootloader binary for the T3W1 hardware model used in QA/testing, and updates the matching hash list so the firmware recognizes it. There is no source-code change, no description of a security fix, and no public reference linking it to a vulnerability.

This commit fixes a typo in the code that manages the Optiga secure chip's metadata. The code was writing a value to the wrong variable name (`metadata_locked` instead of `metadata`). Because the intended `metadata` structure was not fully initialized, the device might have compared stored secure-chip settings against an incomplete or incorrect expected value. In the worst case this could affect whether the device correctly detects that the Optiga chip is configured, which is part of the hardware-security boundary protecting secrets. The change is a one-line variable-name correction and is marked [no changelog], so the vendor does not describe it as a security fix.

This commit removes a 'Go to bootloader' menu option from normal user builds of the Trezor hardware wallet, keeping it only in debug/developer builds. The change prevents an ordinary user from intentionally or accidentally rebooting the device into bootloader mode through the on-device menu. While entering bootloader mode is a normal part of firmware updates, exposing it in production builds could let a local attacker with brief physical access force the device into a state where they could attempt to install modified firmware or interfere with an update. The patch is narrow: it only hides the menu item behind a debug-only compile flag, so the underlying bootloader entry mechanism still exists for legitimate update workflows.

This commit fixes a UI flow bug in the Trezor hardware wallet's 'Eckhart' layout. Previously, when a user opened a menu during a confirmation screen and chose an item, the wrong internal signal could be sent: the first menu item was always treated as 'Info' and the second as 'Cancel', even if the menu only contained a cancel option. The fix tracks which menu items actually exist and maps the user's selection to the correct result (Info or Cancel).

This commit fixes a build configuration issue for the Trezor T3W1 hardware wallet. The device supports reading a unique serial number, but the build system was not correctly advertising that capability. As a result, the Python module that handles the 'get serial number' command was accidentally excluded from the firmware image, so the feature would not work at runtime. The patch adds the missing capability flag for the T3W1 (emulator and three hardware revisions) and fixes a related list-concatenation bug in the build script that could have caused other feature exclusions to behave incorrectly. There is no direct evidence in the commit of a security vulnerability; it reads as a functionality/availability fix.

This commit simply shortens the on-screen label for a device menu item from 'Regulatory certification' to 'Regulatory' (or translated equivalents) and updates the internal translation key from regulatory_certification__title to regulatory__title. It is a cosmetic UI text change with no security relevance.

This commit simply reverts a previous internal renaming of a user-interface text label. It changes the translation key for a Bluetooth 'Waiting for connection...' message from 'words__waiting_for_host' back to 'ble__waiting_for_host' and updates the generated translation files accordingly. There is no security relevance.

This commit adds a user-facing warning message on Trezor devices when the connected computer or phone is slow to respond during a button-confirmation step. It is a usability improvement to prevent users from seeing a confusing blank screen; it does not fix a vulnerability and does not introduce a new attack path.

This is a visual layout tweak for the Trezor T3W1 hardware wallet. It slightly shrinks the plus/minus buttons on a settings screen so that translated text (like the word "seconds") does not get cut off. There is no indication of a security vulnerability or exploit.

This commit fixes a single spelling mistake in a code comment, changing 'then' to 'than'. It does not change any executable code, behavior, or security properties of the Trezor firmware.

This commit simply removes an unused header file include from a battery fuel gauge source file. There is no functional code change, no bug fix, and no security relevance visible in the diff.

This commit adds a new data file describing a specific battery model (HCF343837NCZ) used by the device's power/fuel gauge. It contains calibration tables for temperature, voltage, capacity, and internal resistance. There is no code that processes user input, no network activity, no cryptographic operations, and no change to existing logic. It is purely a hardware-support data addition.

This commit adds a single header include to a battery fuel gauge source file in preparation for supporting different battery types. There is no functional code change, no security fix, and no security-relevant behavior introduced.

This commit updates the Trezor firmware's battery fuel gauge to support a second battery model (HCF343837NCZ) alongside the existing one. It renames constants to avoid naming conflicts, adds a new compile-time selection case, and includes the new battery data header. There is no indication this is a security fix or introduces a security vulnerability.

This commit changes the bootloader menu on a Trezor hardware wallet so that the 'Pair new device' Bluetooth option is grayed out when Bluetooth Low Energy (BLE) is disabled. It is a UI consistency fix rather than a fix for an exploitable vulnerability. There is no evidence in the commit or supplied references that this resolves a security issue.

This commit changes the Trezor bootloader so that Bluetooth Low Energy (BLE) settings are remembered across reboots. Previously, the bootloader would turn BLE back on even if the user had turned it off. Now the bootloader reads a saved 'BLE enabled' flag from backup memory and only enables BLE if the user had left it on. The pairing/setup workflows still force BLE on because they need it. This is a privacy/usability fix rather than a critical security patch, but it prevents an unwanted BLE radio from being active when the user expects it to be off.

This bootloader patch makes the device erase a special protected memory region (backup RAM) when the user enters a 'wipe code' to factory-reset the device. Without this cleanup, sensitive leftovers could remain in that protected memory after a wipe. The change is small and defensive, but the commit message does not explain what specific risk it fixes.

This commit fixes a Bluetooth behavior on the Trezor T3W1 hardware wallet: after a user turns Bluetooth back on, the device now resumes advertising itself so it can be found and reconnected. Previously it might stay silent, causing connection problems. There is no direct evidence this is a security vulnerability rather than a usability bug.