What the developer wrote
Authored by Roman Zeyde
chore(core): sign translations
[no changelog]
(cherry picked from commit b40aaefea2cfea8128370809107fb6c56aaba0ec)
What changed, and why it matters
This commit simply adds a new digital signature entry to a JSON file that records approved translation bundles for the Trezor hardware wallet. It is a routine metadata update with no code changes and no apparent security relevance.
No action required. Treat as routine signed-asset metadata update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds one object to core/translations/signatures.json under the ‘history’ array. The object contains a secp256k1-style signature (starting with ‘03’ recovery byte), version ‘2.12.5.0’, a merkle_root, datetime, and commit hash. No executable code, cryptographic algorithms, or validation logic are modified. The change is consistent with the existing pattern of signed translation metadata.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
### core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "c0ad2598392ac977793869046c885726ffd4af98"
},
"history": [
+ {
+ "signature": "03f0f285848034349a8e91708afb09607a4c0c7c4053082311f578a17d9bf9cd46d16ce461c08d55f01a731c849ead99f2dc3d73177e91f7bc5ac49e41eebd0003",
+ "version": "2.12.5.0",
+ "merkle_root": "073afda8d30bcc83839ed5e961ae77bc01254b1ae594a9f79c546a7156106d15",
+ "datetime": "2026-09-01T14:18:32.424886+00:00",
+ "commit": "66ac7295aaa0aa9fb427a0cc035b34dd61b6d472"
+ },
{
"signature": "03faf0f703f9237ecf13bfe0e013426ca218c18dbafebe168c621547c34c452ea705d220bd2683052598781965698632b65cb517dcead3f3b9a0b7825f7b039703",
"version": "2.12.4.0",Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.