What the developer wrote
Authored by Ioan Bizău
chore(core): sign translations
[no changelog]
(cherry picked from commit 75927b452c7d6a43899a337c946aeaedacfdf771)
What changed, and why it matters
This commit simply adds a new cryptographic signature entry to a JSON file that records approved translation data for Trezor devices. There is no code change, no bug fix, and no visible security issue. It appears to be routine release housekeeping: signing the translation bundle for firmware version 2.11.2.0.
No action required. Treat as routine metadata update. If reviewing as part of a release audit, verify the signature was produced by the expected vendor release key and that the referenced commit and merkle_root correspond to the published translation bundle.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff appends one object to core/translations/signatures.json containing a secp256k1-style ECDSA signature (0x03 prefix, 65-byte compressed/recoverable form), version 2.11.2.0, a merkle_root, datetime, and commit hash. The file is a signed manifest for translation blobs; adding a signature is a normal part of the release process. No executable code, cryptographic parameters, or verification logic were modified.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 6098dc46..9d15341e 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "6704563b3504e551288e6fd5d74ea9e94f88a8ee"
},
"history": [
+ {
+ "signature": "03264b4d6b9488552d50a13bd052a8e252ba4f08a6748bed693232a7b1f88f0a4fa3318beda20e6bee63ce22876fffd6a62a31b160c69671d1c6176a71d02d400f",
+ "version": "2.11.2.0",
+ "merkle_root": "e0cf6b76ae8d344ab40c44180b6d304517d0e3c57426ff19c1571eb5f5d6b5c7",
+ "datetime": "2026-05-06T06:26:32.098615+00:00",
+ "commit": "c2025931d489dc0bccd8daad84f876bdd4677e5f"
+ },
{
"signature": "03fe9a96f5de508cf01e0c622db1d87b6a79792a5cfd3cd083f3b24d188f72109f8a8d948106f4625fc73c82cb5a66199ea7b18335eed49df8ef47782b9100c104",
"version": "2.11.1.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.