What changed, and why it matters
This commit only updates a signed release manifest file (releases/signatures.txt). It refreshes SHA-256 checksums for several changelog/history files and adds two new Q1 firmware release files, then re-signs the file with a PGP signature. No source code, executable logic, or configuration behavior changed. There is no indication of a security fix or vulnerability.
No action required; this is a routine release-signature update. Review the associated changelog entries if you need details about what the newly signed firmware release contains.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is limited to releases/signatures.txt. It updates hashes for Next-ChangeLog.md, History-Q.md, History-Mk5.md, History-Mk4.md, History-Mk.md, and ChangeLog.md, and adds entries for v1.5.3Q Q1 firmware DFU files. The PGP signature block was regenerated. No code, build scripts, or security-relevant files were modified.
Changed components
releases/signatures.txtInspect captured patch +16 / −14
### releases/signatures.txt
@@ -2,13 +2,15 @@
Hash: SHA256
95eff9e044cdb6b3d00961ae72d450684d5441c6a3661ab550a3c3aa0882e754 README.md
-7172391d325712ae213751256623e25d29498cef8377fbda0d0c9d483f93eb1a Next-ChangeLog.md
-c130a6fcc2f3a60b044b732606211b9a499d12053f7730717eb2ba21df598675 History-Q.md
-f373409fae95c7c33dfb07f12cceb6fb59bd219a791ad853d37eb747e5c26c91 History-Mk5.md
-f373409fae95c7c33dfb07f12cceb6fb59bd219a791ad853d37eb747e5c26c91 History-Mk4.md
+139f3d0fb5913634d75b1a02b3109e42438bd3393b722f73136165623a8c5108 Next-ChangeLog.md
+29c525e41d9a809309fa19a55866890bd303d97d14bfaf1a4ab770df9580d564 History-Q.md
+084861194d74568648220ec312e8d6505beaa53c8ef33f78f052b4815daeac41 History-Mk5.md
+084861194d74568648220ec312e8d6505beaa53c8ef33f78f052b4815daeac41 History-Mk4.md
a8b437624c9ac551b3be2161879a697bfc606ced856926a37e21fefeed8f570c History-Mk3.md
-f373409fae95c7c33dfb07f12cceb6fb59bd219a791ad853d37eb747e5c26c91 History-Mk.md
-c7b4a31f3903e28eec29ff49ace1cde7770677c4c68ab0b3bb9054893fcee195 ChangeLog.md
+084861194d74568648220ec312e8d6505beaa53c8ef33f78f052b4815daeac41 History-Mk.md
+59b14359f5feab409b292902512b63f5ceaf1cf16d001e7d39365f1e0211a3b5 ChangeLog.md
+66aa6a76ffe17ee53adb7a3278e095da39d32decb71f44e1b20a2ee642a1c74d 2026-09-30T2025-v1.5.3Q-q1-coldcard.dfu
+8ecd640fe97d373c2002b5035ae9ba07deb2f9ff50d5291d4fa1500541e4b4b9 2026-09-30T2025-v1.5.3Q-q1-coldcard-factory.dfu
49eb41b6b06c97f2622bc9a7496f9d5d792c0b0906e619ba0ddaf6333b561398 2026-09-03T1541-v5.6.2-mk-coldcard.dfu
87ec4c2d4f07a96275cea394432596d1ec96c81d5c252bbda8884800570bee9f 2026-09-03T1541-v5.6.2-mk-coldcard-factory.dfu
2644d7c8e81136f7d5303cd0a39a99a36c6893b2b27ac363eafee17939e1a0db 2026-09-03T1540-v1.5.2Q-q1-coldcard.dfu
@@ -150,12 +152,12 @@ f05bc8dfed047c0c0abe5ed60621d2d14899b10717221c4af0942d96a1754f33 2021-03-29T192
bea27f263b524a66b3ed0a58c16805e98be0d7c3db20c2f7aab3238f2c6a6995 2019-12-19T1623-v3.0.6-coldcard.dfu
-----BEGIN PGP SIGNATURE-----
-iQEzBAEBCAAdFiEERYl3mt/BTzMnU06oo6MbrVoqWxAFAmqZlTUACgkQo6MbrVoq
-WxDZ0wf9FyrlEpQEsbKtNA562MGUHLkluE+Q3GBdGR9kB6Iueqb9YZPubUKCCuqv
-FlNQJfHR5XU+j35lmpazGvPj36mYX9t/Vj8goUkPTj/OaxMz3ux8h8JfOXBgodVv
-EzSeBUA8CueovOW7kZI92SZkIM4PrnQP62fyzeyEHNhp683zgkFFNiFHf9iFbC7Q
-h6DQk79nMQMmrXK7vGNfg7mg3dmtLNXEh1YTeeBqU+Q6vc6cxLgNTMPAwpUg6UOR
-VQnzw08Avsne+szNJNCFw040S5R74XYkFzby6ftYq52D4ZOabMNaGz8FGKMeeJop
-2nNfC+t+FyzjuPVS5N+Lar381XEz1A==
-=p6uB
+iQEzBAEBCAAdFiEERYl3mt/BTzMnU06oo6MbrVoqWxAFAmq9cDsACgkQo6MbrVoq
+WxB2Twf8DOuTYtEQXu7YBa9RgIyp26yn+DgeI70+57WF5bHrWwT6fNTIf0PESSD6
+xeM763VXu8hjSiHo55DZB1OCVhW2kj2DcXmy9cNl2I1dPT411clv5GQLv5pwSW4f
+qyNs2F1PzS/MrcI9ciP/sHOy66H5lfek7t1G3EdOYandx5aWzmZS4slLMQGP7jzC
+wh5QwvQlOs+seqC0SrVMLpW5Fp8EK8nI71bB0SxUgj3odX+qcZc7SsPsNg4NXBAD
+h5F2rLfDshD2UVXDAiqUM73vM0qjvy8fSRbhv8rUdH5spyF2zhvenbpiqeMNnHcl
+PUSWGqXq78XOI0U0jCc+xn5hYUOwqQ==
+=BfV7
-----END PGP SIGNATURE-----Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.