Trezor firmware

This is a small bug fix in the Trezor hardware wallet firmware. After a user unpairs a Bluetooth device, the device was trying to send a button-press request over the now-disconnected Bluetooth link, which would fail. The fix stops sending that request during the success screen shown right after unpairing. It is a robustness fix, not a security vulnerability fix.

This bootloader-only change adds a short wait and a temporary logo screen when a Trezor device has no firmware installed and Bluetooth (BLE) is enabled. The goal is to give the wireless nRF chip time to finish starting up before the user sees the 'Start' setup button. Without this delay, the device could briefly show the start button while the Bluetooth state is still unknown, which might lead to a confusing or inconsistent setup experience. There is no direct evidence in the commit that this fixes an exploitable security vulnerability.

This commit changes how a Trezor Bluetooth device broadcasts its presence to Apple devices. It makes the device advertise more frequently at first, then slow down after 30 seconds, and adds a lock to prevent simultaneous changes. There is no clear security bug being fixed; it appears to be a compatibility/stability improvement for iPhones and iPads.

This commit removes a short 0.1-second delay from an automated test script. It does not change the actual Trezor firmware or any code that runs on user devices. There is no security issue here.

This commit simply deletes an unused helper function that created a special type of session without a cache entry. There is no functional change to active code, no bug fix, and no security relevance.

This commit tightens how the Trezor hardware wallet handles passphrase-protected sessions. Previously, a host could supply a passphrase in a message even when the device was configured to require the passphrase only on the device. Now the firmware raises an error in that case, preventing the host from silently overriding the 'always on device' setting. The change also adds a debug-only warning when a session is created with a passphrase while passphrase protection is disabled on the device.

This commit only adds a new automated test for an existing feature. It does not change the actual Trezor firmware or its security behavior. The test checks that when a user enables 'passphrase always entered on device,' the device correctly rejects passphrases sent from the computer and accepts passphrases typed directly on the device. There is no security fix or vulnerability introduced here.

This commit only adds new expected screen snapshots (called 'fixtures') for an automated user-interface test. It does not change any firmware code, wallet logic, or security behavior. There is no security issue here.

This commit only changes a type annotation in documentation and generated mock files. It replaces `tuple[int, str]` with `tuple[ButtonRequestType, str]` for a function that returns button request information. No actual code behavior changes, and there is no security relevance.

This commit only adds Python type annotations to the scheduler/loop module and a couple of related files. It does not change runtime behavior, fix a bug, or alter security logic. It is a code-quality/refactoring change.

This is a minor code cleanup in the test suite only. It replaces an older Python type-hint style (`Union[...]`) with a newer, equivalent syntax (`|`) in a single test helper file. There is no change to the actual Trezor firmware or to any runtime behavior, and no security relevance.

This commit is a routine code cleanup that replaces older Python type-hint syntax (Union[...]) with the newer pipe syntax (|). It also updates one helper function to return None instead of the string 'dynamic' for consistency. There is no change to program logic, no security fix, and no vulnerability introduced.

This is a routine code cleanup in the Trezor firmware's user-interface layer. It replaces a custom 'not implemented' error message with Python's standard NotImplementedError and removes some method-specific error strings. There is no security-relevant change: the same functions still fail in the same situations, only the error type and wording differ.

This commit changes how the Trezor hardware wallet displays pairing and connection prompts for its new Bluetooth-like 'THP' protocol. Instead of building the prompt sentence in Python code, it now uses a dedicated Rust UI screen that highlights the app name and host name in yellow. This is a user-experience and anti-phishing improvement, not a fix for a remotely exploitable vulnerability. The change only affects on-screen text formatting and which UI component is used; it does not change cryptographic checks, authorization logic, or data parsing.

This commit updates translation stub files used during development and type-checking. It replaces placeholder empty strings with actual English text and changes the template so it picks the first non-empty translation when generating stubs. There is no runtime firmware change and no security relevance.

This is a small internal code cleanup in the Trezor firmware's text-rendering system. It removes a flag stored inside text-drawing instructions and tracks it separately instead, which slightly reduces memory use and allows more drawing instructions to be stored. There is no indication this fixes a security bug or changes user-visible behavior in a risky way.

This commit is a simple rename of a Rust function from `add_text` to `add_text_with_font` across several UI layout files. It does not change any behavior, logic, or security properties of the code. It is a routine code cleanup with no user-visible or security impact.

This is a routine internal code cleanup in the Trezor firmware's on-screen text rendering system. It removes the font field from individual text-drawing instructions and instead tracks the next font to use separately, slightly reducing memory use per instruction and allowing a few more instructions to be stored. There is no indication this fixes a security bug or changes user-visible behavior.

This is a routine automated dependency update by Dependabot, bumping the Python image-processing library Pillow from version 11.2.1 to 11.3.0 inside an internal testing tool. The change is a single version number in a requirements file for the automatic battery tester, which is not part of the Trezor firmware that runs on devices or handles cryptocurrency secrets. There is no indication in the commit that this fixes a security issue, and no verified security references were supplied.

This commit is a routine cleanup of a Python package Makefile. It removes old setup.py-based build and install targets and switches the distribution target to use the modern 'uv' build tool. There is no security relevance in the diff itself.

This commit is purely a code-style update. It reformats Python source files to match the latest version of the Black formatter, changes uppercase hex escapes in byte strings to lowercase, removes unnecessary 'global' declarations, and adjusts some 'with' statements and trailing commas to satisfy updated flake8 rules. There are no functional changes to the firmware, tests, or tooling.

This commit is a routine build tooling change. It switches the Python packaging for a small internal command-line tool (toiftool) from Poetry to uv, updating only documentation and the pyproject.toml configuration file. There is no change to the tool's actual code, dependencies, or behavior, and no security relevance is apparent.

This commit is a routine build tooling change. It switches the Python packaging tool for Trezor's internal developer utilities from Poetry to uv, updates the pyproject.toml configuration format, and adds an empty __init__.py file. There is no indication of any security fix, vulnerability, or behavior change in the actual tools.

This commit is a routine build tooling change. It switches the packaging setup for an internal Python linting plugin from Poetry to uv/hatchling, updates the Python version requirement from 3.8+ to 3.9+, and removes pinned wildcard dependency versions. There is no change to firmware, wallet logic, cryptography, or any runtime security behavior.

This commit is a routine build-system housekeeping change for the Trezor firmware repository. It replaces the Python Poetry package manager with the `uv` package manager across CI workflows, build scripts, and documentation. No device firmware code, cryptographic logic, or security-sensitive behavior is modified. The change is purely about how development dependencies are installed and invoked.