What the developer wrote
Authored by obrusvit
chore(core): sign translations
[no changelog]
What changed, and why it matters
This commit adds a new cryptographic signature entry to a JSON file that records approved translation bundles for the Trezor hardware wallet. There is no code change and no visible security defect. It appears to be a routine administrative step to authorize a new set of translated strings.
No action required. Treat as routine metadata update. If reviewing supply-chain integrity, verify the signature was produced by the expected translation-signing key and that the referenced commit (ff1c4a31d6ee3cc7663a0e3361b761cd1b3aea90) contains only translation data.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff appends one object to core/translations/signatures.json containing a secp256k1-style ECDSA signature (03…), version 2.9.2.0, a merkle_root, timestamp, and commit hash. The file format matches the existing history entries. No executable code, parsing logic, or signature verification behavior is modified.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 18f8c25d..051e0dca 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "671847de53ee2bd2c27119bf378e8ef07197f24c"
},
"history": [
+ {
+ "signature": "03e31c456a0c87ccfbc3d5058588a9a6079c3909977517ac8458077e80bd3e2c7bf6c55fdec780022439257b42022feb46bb605047fe1aceaf3548718301e4a003",
+ "version": "2.9.2.0",
+ "merkle_root": "d83452bcbd293dadbe58e63101a596fe54b03a8df002746241cc4c206201de7c",
+ "datetime": "2025-09-29T07:49:38.232088+00:00",
+ "commit": "ff1c4a31d6ee3cc7663a0e3361b761cd1b3aea90"
+ },
{
"signature": "03a08067b4238f6100140aa7f8bfc4b75effc35c05eb256d29ccad78e3f2276de78f519141364432679f2bbe4e8f182aa9700747bfd62c12f1494eac31b2058205",
"version": "2.9.1.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.