chore: update `trezor_connect` dependency to latest commit hash across pubspec files (#2618)

Cake Wallet/Cake Wallet / Monero.com

55bae6c5 View source ↗

Public commit record

What the developer wrote

Authored by Konstantin Ullrich

70/100 · Adequate

chore: update `trezor_connect` dependency to latest commit hash across pubspec files (#2618)

✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Links an issue, advisory, or supporting reference! No meaningful explanatory body

The short version

What changed, and why it matters

This commit simply updates the version (commit hash) of an internal dependency called trezor_connect in three package configuration files. There is no code change in the Cake Wallet repository itself, and no security-related explanation is provided in the commit.

Recommended action

Review the corresponding changes in the cake-tech/trezor_connect repository at commit d1242cea90f84b00200e7bcab914a5af750e23fb to determine whether that dependency update contains any security fixes or regressions. This Cake Wallet commit alone does not indicate a security issue.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The diff updates the Git ref for the cake-tech/trezor_connect dependency from 59b3ceec158d3393b20d0c596cab2abcc62ac8e4 to d1242cea90f84b00200e7bcab914a5af750e23fb in cw_bitcoin/pubspec.yaml, cw_evm/pubspec.yaml, and pubspec_base.yaml. No source code, logic, or security-relevant metadata is changed in this repository. The contents of the new trezor_connect commit are not supplied and cannot be evaluated.

Changed components

cw_bitcoin/pubspec.yamlcw_evm/pubspec.yamlpubspec_base.yaml

Inspect captured patch +3 / −3

diff --git a/cw_bitcoin/pubspec.yaml b/cw_bitcoin/pubspec.yaml
index d8d360eb..bd4fe327 100644
--- a/cw_bitcoin/pubspec.yaml
+++ b/cw_bitcoin/pubspec.yaml
@@ -57,7 +57,7 @@ dependencies:
   trezor_connect:
     git:
       url: https://github.com/cake-tech/trezor_connect
-      ref: 59b3ceec158d3393b20d0c596cab2abcc62ac8e4
+      ref: d1242cea90f84b00200e7bcab914a5af750e23fb
   bitbox_flutter:
     path: ../scripts/bitbox_flutter
   socks_socket:
diff --git a/cw_evm/pubspec.yaml b/cw_evm/pubspec.yaml
index 0785d78f..4ba23a5e 100644
--- a/cw_evm/pubspec.yaml
+++ b/cw_evm/pubspec.yaml
@@ -36,7 +36,7 @@ dependencies:
   trezor_connect:
     git:
       url: https://github.com/cake-tech/trezor_connect
-      ref: 59b3ceec158d3393b20d0c596cab2abcc62ac8e4
+      ref: d1242cea90f84b00200e7bcab914a5af750e23fb
 
 dependency_overrides:
   web3dart:
diff --git a/pubspec_base.yaml b/pubspec_base.yaml
index 3360dec8..510c3ad4 100644
--- a/pubspec_base.yaml
+++ b/pubspec_base.yaml
@@ -119,7 +119,7 @@ dependencies:
   trezor_connect:
     git:
       url: https://github.com/cake-tech/trezor_connect
-      ref: 59b3ceec158d3393b20d0c596cab2abcc62ac8e4
+      ref: d1242cea90f84b00200e7bcab914a5af750e23fb
   bitbox_flutter:
     path: ./scripts/bitbox_flutter
   hashlib: 1.19.2

Risk score

Why this scored 15/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 10/10

Evidence quality 5/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 15/100

Community notes

Related watches

Don't force max brightness when showing seed QR (#3682)

fix: add new images and fix integration tests (#3679)

Add Robinhood Chain (#3398)