build(tools): migrate trezor-pylint-plugin to uv
What the developer wrote
Authored by matejcik
build(tools): migrate trezor-pylint-plugin to uv
What changed, and why it matters
This commit is a routine build tooling change. It switches the packaging setup for an internal Python linting plugin from Poetry to uv/hatchling, updates the Python version requirement from 3.8+ to 3.9+, and removes pinned wildcard dependency versions. There is no change to firmware, wallet logic, cryptography, or any runtime security behavior.
No security action needed. Treat as normal dependency/build maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff only modifies tools/trezor-pylint-plugin/pyproject.toml and .gitignore. It replaces [tool.poetry] metadata with [project] metadata for hatchling, changes the build backend from poetry-core to hatchling.build, bumps requires-python from ^3.8 to >=3.9,<4, and converts wildcard Poetry dependencies (pylint = ‘’, astroid = ‘’) to PEP 621 dependency strings. A uv.lock entry is added to .gitignore. No source code, APIs, or security controls are altered.
Changed components
tools/trezor-pylint-plugin/pyproject.tomltools/trezor-pylint-plugin/.gitignoreInspect captured patch +12 / −11
diff --git a/tools/trezor-pylint-plugin/.gitignore b/tools/trezor-pylint-plugin/.gitignore
index cd3cd5381..5c8dbb7dd 100644
--- a/tools/trezor-pylint-plugin/.gitignore
+++ b/tools/trezor-pylint-plugin/.gitignore
@@ -1,2 +1,3 @@
*.egg-info
/build
+uv.lock
diff --git a/tools/trezor-pylint-plugin/pyproject.toml b/tools/trezor-pylint-plugin/pyproject.toml
index bfddd5262..30133f8b3 100644
--- a/tools/trezor-pylint-plugin/pyproject.toml
+++ b/tools/trezor-pylint-plugin/pyproject.toml
@@ -1,15 +1,15 @@
-[tool.poetry]
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
name = "trezor-pylint-plugin"
version = "0.1.0"
description = ""
-authors = ["matejcik <ja@matejcik.cz>"]
+authors = [{ name = "matejcik", email = "ja@matejcik.cz" }]
+requires-python = ">=3.9,<4"
readme = "README.md"
-
-[tool.poetry.dependencies]
-python = "^3.8"
-pylint = "*"
-astroid = "*"
-
-[build-system]
-requires = ["poetry-core"]
-build-backend = "poetry.core.masonry.api"
+dependencies = [
+ "pylint",
+ "astroid",
+]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.