docs(python): generate changelog for 0.20.0

Trezor/Trezor firmware

45ff2419 View source ↗

Public commit record

What the developer wrote

Authored by matejcik

57/100 · Thin

docs(python): generate changelog for 0.20.0

✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body

The short version

What changed, and why it matters

This commit is purely a documentation update that generates the changelog for the Python trezorlib package version 0.20.0. It deletes small changelog fragment files and merges their contents into the main CHANGELOG.md, plus updates the command-line help documentation. No actual source code, firmware, or security logic is changed.

Recommended action

No security action needed; treat as routine documentation/release housekeeping.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The diff only touches changelog fragments, python/CHANGELOG.md, and python/docs/OPTIONS.rst. It records release notes for prior development work (API refactor, BLE options, telemetry/Tron commands, removal of deprecated helpers, WebUSB timeout fix, etc.) but does not itself modify any implementation. Therefore it introduces no vulnerability and fixes no vulnerability directly.

Changed components

python/CHANGELOG.mdpython/docs/OPTIONS.rstpython/.changelog.d/*

Inspect captured patch +81 / −11

diff --git a/python/.changelog.d/6103.removed b/python/.changelog.d/6103.removed
deleted file mode 100644
index 10a30829..00000000
--- a/python/.changelog.d/6103.removed
+++ /dev/null
@@ -1 +0,0 @@
-Deprecate uploading language blob during firmware update.
diff --git a/python/.changelog.d/6112.fixed b/python/.changelog.d/6112.fixed
deleted file mode 100644
index 7f14d166..00000000
--- a/python/.changelog.d/6112.fixed
+++ /dev/null
@@ -1 +0,0 @@
-Avoid dropping WebUSB chunks in case of a timeout.
diff --git a/python/.changelog.d/6273.added b/python/.changelog.d/6273.added
deleted file mode 100644
index 3987ae5a..00000000
--- a/python/.changelog.d/6273.added
+++ /dev/null
@@ -1 +0,0 @@
-Use keyring package for storing THP keys and credentials.
diff --git a/python/.changelog.d/6273.fixed b/python/.changelog.d/6273.fixed
deleted file mode 100644
index ab6a33d2..00000000
--- a/python/.changelog.d/6273.fixed
+++ /dev/null
@@ -1 +0,0 @@
-Support resuming THP sessions.
diff --git a/python/.changelog.d/6273.incompatible b/python/.changelog.d/6273.incompatible
deleted file mode 100644
index 2941e1ab..00000000
--- a/python/.changelog.d/6273.incompatible
+++ /dev/null
@@ -1 +0,0 @@
-Refactor trezorlib session-based API.
diff --git a/python/.changelog.d/6273.removed b/python/.changelog.d/6273.removed
deleted file mode 100644
index b1cb5a87..00000000
--- a/python/.changelog.d/6273.removed
+++ /dev/null
@@ -1 +0,0 @@
-Remove vestigial memory_write/read/erase methods.
diff --git a/python/CHANGELOG.md b/python/CHANGELOG.md
index a16d9c56..d6c31c9f 100644
--- a/python/CHANGELOG.md
+++ b/python/CHANGELOG.md
@@ -5,6 +5,31 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.20.0] (2026-02-10)
+[0.20.0]: https://github.com/trezor/trezor-firmware/compare/python/v0.20.0-dev0...python/v0.20.0
+
+Version 0.20.0 introduces a set of **major breaking API changes**. All user code must be upgraded.
+
+As announced, the API has changed significantly since the pre-release version 0.20.0-dev.
+
+### Incompatible changes
+- Refactor trezorlib session-based API.  [#6273]
+
+### Added
+- Use keyring package for storing THP keys and credentials.  [#6273]
+
+### Removed
+- Deprecate uploading language blob during firmware update.  [#6103]
+- debuglink: Remove vestigial memory_write/read/erase methods.  [#6273]
+- Deprecated `@expect` decorator was removed.  [#6273]
+- Deprecated `str` return values in functions whose result is a success have been removed.  [#6273]
+
+### Fixed
+- Avoid dropping WebUSB chunks in case of a timeout.  [#6112]
+- Support resuming THP sessions.  [#6273]
+- trezorctl: BLE behavior on macOS was improved.  [#6449]
+- trezorctl: fix crash when device authentication allowlist is unavailable.  [#6449]
+
 ## [0.20.0-dev0] (2025-10-21)
 [0.20.0-dev0]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.10...python/v0.20.0-dev0
 
@@ -939,3 +964,7 @@ This version is a pre-release. The new API is unstable and may change until 0.20
 [#5499]: https://github.com/trezor/trezor-firmware/pull/5499
 [#5760]: https://github.com/trezor/trezor-firmware/pull/5760
 [#5928]: https://github.com/trezor/trezor-firmware/pull/5928
+[#6103]: https://github.com/trezor/trezor-firmware/pull/6103
+[#6112]: https://github.com/trezor/trezor-firmware/pull/6112
+[#6273]: https://github.com/trezor/trezor-firmware/pull/6273
+[#6449]: https://github.com/trezor/trezor-firmware/pull/6449
diff --git a/python/docs/OPTIONS.rst b/python/docs/OPTIONS.rst
index c1e2fd58..c6e7a601 100644
--- a/python/docs/OPTIONS.rst
+++ b/python/docs/OPTIONS.rst
@@ -27,12 +27,13 @@ on one page here.
 
   Options:
     -p, --path TEXT           Select device by specific path.
+    -B, --ble / --no-ble      Enable/disable support for Bluetooth Low Energy.
     -v, --verbose             Show communication messages.
     -j, --json                Print result as JSON object
     -P, --passphrase-on-host  Enter passphrase on host.
     -S, --script              Use UI for usage in scripts.
-    -s, --session-id HEX      Resume given session ID.
-    -r, --record TEXT         Record screen changes into a specified directory.
+    -s, --session-id DATA     Resume given session.
+    -r, --record DIRECTORY    Record screen changes into a specified directory.
     --version                 Show the version and exit.
     --help                    Show this message and exit.
 
@@ -41,7 +42,7 @@ on one page here.
     ble                BLE commands.
     btc                Bitcoin and Bitcoin-like coins commands.
     cardano            Cardano commands.
-    clear-session      Clear session (remove cached PIN, passphrase, etc.).
+    clear-session      Clear current session and lock the device.
     crypto             Miscellaneous cryptography features.
     debug              Miscellaneous debug features.
     device             Device management commands - setup, recover seed, wipe, etc.
@@ -61,6 +62,7 @@ on one page here.
     set                Device settings.
     solana             Solana commands.
     stellar            Stellar commands.
+    telemetry          Telemetry commands.
     tezos              Tezos commands.
     tron               Tron commands.
     usb-reset          Perform USB reset on stuck devices.
@@ -104,7 +106,8 @@ BLE commands.
     --help  Show this message and exit.
 
   Commands:
-    unpair  Erase bond of currently connected device, or all devices (on device side)
+    connect  Connect to the device via BLE.
+    unpair   Erase bond of currently connected device, or all devices (on device side).
 
 Bitcoin and Bitcoin-like coins commands.
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -194,6 +197,7 @@ Miscellaneous debug features.
     optiga-set-sec-max  Set Optiga's security event counter to maximum.
     prodtest-t1         Perform a prodtest on Model One.
     record              Record screen changes into a specified directory.
+    set-log-filter      Set logging filter string.
 
 Device management commands - setup, recover seed, wipe, etc.
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -214,10 +218,12 @@ Device management commands - setup, recover seed, wipe, etc.
   Commands:
     authenticate          Verify the authenticity of the device.
     backup                Perform device seed backup.
+    forget                Forget a THP pairing key.
     load                  Upload seed and custom configuration to the device.
     reboot-to-bootloader  Reboot device into bootloader mode.
     recover               Start safe recovery workflow.
     sd-protect            Secure the device with SD card protection.
+    serial-number         Get serial number.
     set-busy              Show a "Do not disconnect" dialog.
     setup                 Perform device setup and generate new seed.
     tutorial              Show on-device tutorial.
@@ -304,7 +310,9 @@ Evolu commands.
     --help  Show this message and exit.
 
   Commands:
-    get-node  Return the SLIP-21 node for Evolu.
+    get-delegated-identity-key  Request the delegated identity key of this device.
+    get-node                    Return the SLIP-21 node for Evolu.
+    sign-registration-request   Sign a registration request for this device to be registered at...
 
 FIDO2, U2F and WebAuthN management commands.
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -500,6 +508,25 @@ Stellar commands.
     get-address       Get Stellar public address.
     sign-transaction  Sign a base64-encoded transaction envelope.
 
+Telemetry commands.
+~~~~~~~~~~~~~~~~~~~
+
+.. code::
+
+  trezorctl telemetry --help
+
+.. code::
+
+  Usage: trezorctl telemetry [OPTIONS] COMMAND [ARGS]...
+
+    Telemetry commands.
+
+  Options:
+    --help  Show this message and exit.
+
+  Commands:
+    get  Read telemetry data from the device.
+
 Tezos commands.
 ~~~~~~~~~~~~~~~
 
@@ -521,3 +548,23 @@ Tezos commands.
     get-public-key  Get Tezos public key.
     sign-tx         Sign Tezos transaction.
 
+Tron commands.
+~~~~~~~~~~~~~~
+
+.. code::
+
+  trezorctl tron --help
+
+.. code::
+
+  Usage: trezorctl tron [OPTIONS] COMMAND [ARGS]...
+
+    Tron commands.
+
+  Options:
+    --help  Show this message and exit.
+
+  Commands:
+    get-address  Get Tron address
+    sign-tx      Sign a raw transaction.
+

Risk score

Why this scored 15/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 10/10

Evidence quality 5/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 15/100

Community notes

Related watches

refactor(core): digest EIP-1559/EIP-7702 magic without RLP encoding

test(core): test RLP self-encoding bytestrings

chore(core): remove sha1 from regular FW