What the developer wrote
Authored by Martin Milata
chore(core): sign translations
[no changelog]
(cherry picked from commit b09832e821eac9ba247351037a2c8e2b585cad7c)
What changed, and why it matters
This commit simply adds a new digital signature entry to a JSON file that records approved translation bundles for the Trezor hardware wallet firmware. There is no code change, no bug fix, and no indication of a security issue. It appears to be routine release housekeeping.
No security action required. Treat as routine metadata update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff appends one object to the ‘history’ array in core/translations/signatures.json. The object contains an ECDSA-style signature (leading byte 03), version ‘2.12.3.0’, a merkle_root, datetime, and commit hash. This is consistent with Trezor’s existing translation signing infrastructure, which ensures only vendor-approved translation blobs are loaded by the device. No executable code, cryptographic parameters, or verification logic were modified.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 48306ff2..1bdb9c89 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "9e9f21a1346b5314faaae3cfb537b40ea1a9f3f3"
},
"history": [
+ {
+ "signature": "036fef5ad1fbbf06c662e8b0b6e0ac1fd76e94f4aefc3fd59f2b48acf2358ecb6a0f3ae601cb535c6135e7c74cb851b0de7a92bf05d066a82d1d37dafd47c0a107",
+ "version": "2.12.3.0",
+ "merkle_root": "dbc92eb37136f4925cda8e89c59f4581e5a3862038451f14377ee00c22a42ab2",
+ "datetime": "2026-07-23T12:46:21.200990+00:00",
+ "commit": "0d3dee246dadb2ee6ee449272f4936a4ff6bbdff"
+ },
{
"signature": "03f533c3460405541a9cf8f00601b2697f6b7477b5c5763ab05a992446704dc4ba0ff6964ea94f0e1ae1d041ccf74eb90ba787cc726c40d955b358dec4ecf03d02",
"version": "2.12.2.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.