What the developer wrote
Authored by Ioan Bizău
chore: sign language blobs
[no changelog]
(cherry picked from commit 44d6b3d7c2415c7a7fd3306a35a9a3daf34275a2)
What changed, and why it matters
This commit simply adds a new digital signature entry to a JSON file that records approved language translation packages for Trezor devices. There is no code change, no bug fix, and no apparent security issue. It appears to be routine release housekeeping.
No action required. Treat as routine metadata update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds one object to core/translations/signatures.json under the ‘history’ array. The object contains a secp256k1-style signature (03…03), version ‘2.9.6.0’, a merkle_root, a datetime, and a commit hash. This is consistent with Trezor’s existing practice of signing translation blobs so firmware can verify their integrity. No executable code, cryptographic parameters, or verification logic were modified.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 43ca9ed7..96ee48e7 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "9f4dda13ca911f1a21e1ffc3fec0e8296d9eeabc"
},
"history": [
+ {
+ "signature": "03b1a8a01a18bada5b21ae798aff7d735c5ad7036da80f660d61039b5aa56bc9a1abe9be4aafec86416d97fba2931822028a3b8a0e5ded09ace19b0991e3788103",
+ "version": "2.9.6.0",
+ "merkle_root": "79fc51b15b1bc3c7cf4b382fc87e9a3d80913148c3514c60810b6fcae854272c",
+ "datetime": "2025-12-02T13:23:03.253982+00:00",
+ "commit": "3bfb51fc36ab70782e266c447ab9934c310e39f2"
+ },
{
"signature": "0327225fee7a2696442468aa55c8aaf5514cd438ec277f471969e0e13062097f151c7fa4538c658f5a94f1440d49d00b9f387af4a9d5c30c7d60d7fbb32306e307",
"version": "2.9.5.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.