Version bump to v2.4.3 + changelog update
What the developer wrote
Authored by Ilya Artemov
Version bump to v2.4.3 + changelog update
What changed, and why it matters
This commit only bumps the app version number from 2.4.2 to 2.4.3 and updates the changelog. No code changes to security logic are present in the diff. The changelog mentions prior security-related UI and derivation-path hardening work, but those changes were made in earlier commits, not here.
No action needed for this commit. Review the actual implementation commits referenced in the changelog (UI security-risk display, SIGN_PSBT/SIGN_MESSAGE graphics changes, and derivation-path hardening) if assessing security posture.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is limited to CHANGELOG.md and Makefile. The Makefile changes APPVERSION_P from 2 to 3. The changelog adds release notes for v2.4.3 describing UI guideline alignment and derivation-path hardening. These notes are descriptive of already-merged changes; the commit itself contains no functional source modifications.
Changed components
Inspect captured patch +18 / −1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b448c2..7bc51af 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,23 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
Dates are in `dd-mm-yyyy` format.
+## [2.4.3] - 25-11-2025
+
+### Changed
+
+- Alignment to the UI guidelines:
+ - Standard graphics API use instead of streaming one for:
+ - `SIGN_PSBT` operation with up to 16 external outputs
+ - `SIGN_MESSAGE` operation with message split handled by graphics library and Line Feed allowed
+ - Security risk information is shown before transaction review and made interruptable, no "suspicious" path warning for `GET_EXTENDED_PUBKEY` operation
+ - Ticker moved to the right for swap operations, other minor UI updates
+
+### Added
+
+- Derivation Path Hardening:
+ - New master key fingerprint syscall use, `HAVE_APPLICATION_FLAG_DERIVE_MASTER` is removed
+ - BIP-32 derivation paths is reinforced
+
## [2.4.2] - 08-09-2025
### Added
diff --git a/Makefile b/Makefile
index c39c028..7210fed 100644
--- a/Makefile
+++ b/Makefile
@@ -28,7 +28,7 @@ PATH_SLIP21_APP_LOAD_PARAMS = "LEDGER-Wallet policy"
# Application version
APPVERSION_M = 2
APPVERSION_N = 4
-APPVERSION_P = 2
+APPVERSION_P = 3
APPVERSION_SUFFIX = # if not empty, appended at the end. Do not add a dash.
ifeq ($(APPVERSION_SUFFIX),)
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.