build(python/tools): migrate toiftool to uv
What changed, and why it matters
This commit is a routine build tooling change. It switches the Python packaging for a small internal command-line tool (toiftool) from Poetry to uv, updating only documentation and the pyproject.toml configuration file. There is no change to the tool's actual code, dependencies, or behavior, and no security relevance is apparent.
No security action needed. This is a build-system migration with no functional or dependency changes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies python/tools/toiftool/README.md and python/tools/toiftool/pyproject.toml to migrate the package metadata format from Poetry-specific sections ([tool.poetry], [tool.poetry.dependencies], [tool.poetry.scripts], poetry-core build backend) to the PEP 621/PEP 517 standard format used by uv/hatchling ([project], [project.scripts], hatchling build backend). The declared dependencies (trezor>=0.13, click>=7.0,<9.0, Pillow>=10.0.1) and the entry-point script mapping remain functionally identical. No source code is changed.
Changed components
python/tools/toiftool/pyproject.tomlpython/tools/toiftool/README.mdInspect captured patch +14 / −14
diff --git a/python/tools/toiftool/README.md b/python/tools/toiftool/README.md
index 29dd58623..625ef19a4 100644
--- a/python/tools/toiftool/README.md
+++ b/python/tools/toiftool/README.md
@@ -4,7 +4,7 @@ A helpful CLI tool to work with TOIFs.
## Installation
-The command `toiftool` is available within firmware repository's Poetry shell.
+The command `toiftool` is available within firmware repository's uv environment.
To install the tool separate from the firmware repository, run:
diff --git a/python/tools/toiftool/pyproject.toml b/python/tools/toiftool/pyproject.toml
index c9706cbb6..f0ff24ef5 100644
--- a/python/tools/toiftool/pyproject.toml
+++ b/python/tools/toiftool/pyproject.toml
@@ -1,19 +1,19 @@
-[tool.poetry]
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
name = "toiftool"
version = "0.1.0"
description = ""
-authors = ["matejcik <ja@matejcik.cz>"]
+authors = [{ name = "matejcik", email = "ja@matejcik.cz" }]
+requires-python = ">=3.8"
readme = "README.md"
+dependencies = [
+ "trezor>=0.13",
+ "click>=7.0,<9.0",
+ "Pillow>=10.0.1",
+]
-[tool.poetry.dependencies]
-python = ">=3.8"
-trezor = ">=0.13"
-click = ">=7.0,<9.0"
-Pillow = ">=10.0.1"
-
-[build-system]
-requires = ["poetry-core"]
-build-backend = "poetry.core.masonry.api"
-
-[tool.poetry.scripts]
+[project.scripts]
toiftool = "toiftool:cli"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.