What the developer wrote
Authored by obrusvit
chore(core): sign translations
- note: translations are signed from branch
`release/translations/25.10.21`
[no changelog]
What changed, and why it matters
This commit simply adds a new cryptographic signature to a list that verifies official language translation files for the Trezor hardware wallet. It does not change any code, fix any bug, or introduce any security weakness. It is a routine administrative update so devices can trust the latest translation pack.
No action required. Treat as routine metadata update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff appends one entry to core/translations/signatures.json containing an ECDSA signature, version string (2.9.3.0), merkle_root, datetime, and commit hash. The file is a registry of signed translation bundles; no executable code, firmware logic, or cryptographic parameters are modified. The signature format and surrounding structure match the existing historical entries.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 0de087fa..f7169b42 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "eec5801e39a22e0c670eb85c3fa0134d76c083fa"
},
"history": [
+ {
+ "signature": "034b4dd4ac62ee0c513a704a2188eae2974e35ebabbf79c64a44c99030f52aa3314548102c03e15d7bd3078e3fb4c3973b7757f46394ce6bce6c5449ed8d7e0102",
+ "version": "2.9.3.0",
+ "merkle_root": "4469943673eb40f954815c4895f6e39f09b6fc1dcc4fa2c16a6b2608713e0b42",
+ "datetime": "2025-10-14T09:47:34.434805+00:00",
+ "commit": "ae709fe4783a2930f41309dc39c6093135ec57b8"
+ },
{
"signature": "03e31c456a0c87ccfbc3d5058588a9a6079c3909977517ac8458077e80bd3e2c7bf6c55fdec780022439257b42022feb46bb605047fe1aceaf3548718301e4a003",
"version": "2.9.2.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.