Merge commit 'refs/pull/2123/head' of https://github.com/BitBoxSwiss/bitbox02-firmware
What the developer wrote
Authored by Marko Bencun
Merge commit 'refs/pull/2123/head' of https://github.com/BitBoxSwiss/bitbox02-firmware
What changed, and why it matters
This commit only adds two digital signature files for an already-released firmware version (v9.25.0). These are third-party reproducible-build assertions by a user named 'yaziza', not changes to the firmware source code. There is no code change and no apparent security issue.
No action required. Treat as routine reproducible-build attestation metadata. If verifying firmware integrity, confirm the signatures against the signer's known public key and the published firmware hashes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit merges pull request #2123, which adds two signature files under releases/firmware-v9.25.0/: assertion-bitbox02-btconly-yaziza.sig and assertion-bitbox02-multi-yaziza.sig. These are detached signatures attesting that the signer reproduced the official v9.25.0 firmware binaries for the btc-only and multi-edition variants. The diff contains no source code, no build system changes, and no executable content.
Changed components
releases/firmware-v9.25.0/assertion-bitbox02-btconly-yaziza.sigreleases/firmware-v9.25.0/assertion-bitbox02-multi-yaziza.sigInspect captured patch +0 / −0
### releases/firmware-v9.25.0/assertion-bitbox02-btconly-yaziza.sig
[binary or diff unavailable]
### releases/firmware-v9.25.0/assertion-bitbox02-multi-yaziza.sig
[binary or diff unavailable]Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.