What changed, and why it matters
This commit simply adds a new approved digital signature for translation files used in Trezor firmware version 2.9.1. It is a routine maintenance task with no visible security-relevant code change.
No action required; treat as routine signed-asset update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff appends one entry to core/translations/signatures.json containing a signature, version 2.9.1.0, merkle_root, datetime, and commit hash. This is the standard mechanism by which Trezor signs approved translation blobs. There is no modification to firmware logic, cryptographic verification routines, or any other executable code.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 8978651d..39a5646e 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "5bc7576aabff225f66984c24d9d343a46f4a64fe"
},
"history": [
+ {
+ "signature": "03a08067b4238f6100140aa7f8bfc4b75effc35c05eb256d29ccad78e3f2276de78f519141364432679f2bbe4e8f182aa9700747bfd62c12f1494eac31b2058205",
+ "version": "2.9.1.0",
+ "merkle_root": "8831f35419234e4ff06e269d941c33cd364118e9ca935ee4587611172bd8612a",
+ "datetime": "2025-09-01T22:53:11.984120+00:00",
+ "commit": "acd56d0113a547e9b5983510b0ce9de079e30e05"
+ },
{
"signature": "0349ccb4cc6200fefc1bc0d51a2488075b7a7ce834bbf20403eeee2aa5dee619fb84e9c9c8b7de094419ee192f23d570ae508ac393596d27eb022232ff34af540f",
"version": "2.9.0.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.