docs(core): changelog for 2.12.1

Trezor/Trezor firmware

ac39a86d View source ↗

Public commit record

What the developer wrote

Authored by PrisionMike

72/100 · Adequate

docs(core): changelog for 2.12.1

(cherry picked from commit 872ac9b19092714cee6814188a3ee9959e9520a6)

✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body

The short version

What changed, and why it matters

This commit is a documentation-only changelog update for the Trezor firmware 2.12.1 release. It does not change any code. The changelog mentions one security fix: a device-locking issue when only SD card protection is enabled. Because the actual code change is not present in this commit, we cannot directly assess how serious the bug is, only that the vendor labeled it as a security fix.

Recommended action

Treat this commit as a release-documentation artifact. To evaluate actual security risk, review the implementation commits for #265 (device locking with SD card protection) and #6342 (passphrase keyboard masking). Users relying on SD card protection should install firmware 2.12.1 once released.

Security signals we found

Vendor-classified security fix: 'Fix device locking if only SD card protection is enabled' (#265)

Privacy-related fix: 'Hide written characters in passphrase keyboard' (#6342) for T2T1/T3T1

No code changes in the analyzed commit; security assessment relies on changelog metadata only

Technical analysis

Evidence from the diff

The commit ac39a86d6e7b7ba129f28f0c2fd0f1fb92024d08 is a cherry-pick of a changelog-only commit (872ac9b19092714cee6814188a3ee9959e9520a6). It deletes fragment files from core/.changelog.d and inserts their contents into the per-device CHANGELOG files for release 2.12.1. The only security-relevant entry is ‘Fix device locking if only SD card protection is enabled’ (#265). No source code, configuration, or binary changes are included, so the diff provides no implementation details of the locking bug or its fix.

Changed components

Trezor Core firmware release 2.12.1 changelogDevice-locking / SD card protection subsystem (referenced, not changed here)Passphrase keyboard UI on T2T1 and T3T1 (referenced, not changed here)

Inspect captured patch +217 / −24

diff --git a/core/.changelog.d/265.security b/core/.changelog.d/265.security
deleted file mode 100644
index 57b3d0f2..00000000
--- a/core/.changelog.d/265.security
+++ /dev/null
@@ -1 +0,0 @@
-Fix device locking if only SD card protection is enabled.
diff --git a/core/.changelog.d/6342.fixed b/core/.changelog.d/6342.fixed
deleted file mode 100644
index d6a67592..00000000
--- a/core/.changelog.d/6342.fixed
+++ /dev/null
@@ -1 +0,0 @@
-[T2T1,T3T1] Hide written characters in passphrase keyboard.
diff --git a/core/.changelog.d/6370.added b/core/.changelog.d/6370.added
deleted file mode 100644
index 859089d5..00000000
--- a/core/.changelog.d/6370.added
+++ /dev/null
@@ -1 +0,0 @@
-Added support for `AccountDelete` transaction in Ripple.
diff --git a/core/.changelog.d/6520.fixed b/core/.changelog.d/6520.fixed
deleted file mode 100644
index 64312392..00000000
--- a/core/.changelog.d/6520.fixed
+++ /dev/null
@@ -1 +0,0 @@
-Improved Tron TRX transfer flow.
diff --git a/core/.changelog.d/6709.fixed b/core/.changelog.d/6709.fixed
deleted file mode 100644
index 17523295..00000000
--- a/core/.changelog.d/6709.fixed
+++ /dev/null
@@ -1 +0,0 @@
- Improve Stellar confirmations flows.
diff --git a/core/.changelog.d/6759.added b/core/.changelog.d/6759.added
deleted file mode 100644
index 9f96b869..00000000
--- a/core/.changelog.d/6759.added
+++ /dev/null
@@ -1 +0,0 @@
-Support for Solana off-chain message signing (OCMS) v0.
diff --git a/core/.changelog.d/6807.added b/core/.changelog.d/6807.added
deleted file mode 100644
index e4bd45d0..00000000
--- a/core/.changelog.d/6807.added
+++ /dev/null
@@ -1 +0,0 @@
-[T3W1] Added MCU device attestation with ML-DSA-44.
diff --git a/core/.changelog.d/6843.changed b/core/.changelog.d/6843.changed
deleted file mode 100644
index 96c93c36..00000000
--- a/core/.changelog.d/6843.changed
+++ /dev/null
@@ -1 +0,0 @@
-Solana System Program's Transfer instruction now allows multisig.
diff --git a/core/.changelog.d/6900.added b/core/.changelog.d/6900.added
deleted file mode 100644
index b1d2d8d9..00000000
--- a/core/.changelog.d/6900.added
+++ /dev/null
@@ -1 +0,0 @@
-[T3W1] Added Tap to Wake setting in device menu.
diff --git a/core/CHANGELOG.T2B1.md b/core/CHANGELOG.T2B1.md
index b52acb17..e59d45d4 100644
--- a/core/CHANGELOG.T2B1.md
+++ b/core/CHANGELOG.T2B1.md
@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.12.1] (2026-06-17)
+
+### Added
+- Added support for `AccountDelete` transaction in Ripple.  [#6370]
+- Support for Solana off-chain message signing (OCMS) v0.  [#6759]
+
+### Changed
+- Solana System Program's Transfer instruction now allows multisig.  [#6843]
+
+### Fixed
+- Improved Tron TRX transfer flow.  [#6520]
+- Improve Stellar confirmations flows.  [#6709]
+
+### Security
+- Fix device locking if only SD card protection is enabled.  [#265]
+
 ## [2.12.0] (21st May 2026)
 
 ### Added
@@ -15,6 +31,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Fixed
 - Updated translations in Cardano flow.  [#5723]
 - Re-introduced initial blob confirmation layout for Ethereum.  [#6597]
+- Truncated device name on BLE pairing.  [#6710]
 - Fixed out-of-memory failure when confirming large input data.  [#6780]
 
 ### Security
@@ -30,6 +47,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Support WebAuthn credentials' pagination.  [#6349]
 - Added support for `VoteWitnessContract` in Tron.  [#6524]
 
+### Fixed
+
 ## [2.11.0] (18th March 2026)
 
 ### Added
@@ -58,6 +77,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Added
 - Added version build number to Features message.  [#6225]
 
+### Changed
+
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 - Fixed address chunkification in certain cases.  [#6279]
@@ -65,12 +86,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Security
 - Fixed side-channel vulnerability in BIP-39 mnemonic processing.
 
-## [2.9.6] (internal release)
+## [2.9.6] (10th December 2025)
 
 ### Fixed
 - Fixed Stellar Amount and Bitcoin lock time font.  [#6109]
+- Make sure to increment THP `seq_bit`.  [#6138]
+- Fixed external tamper trigger clearing.  [#6186]
 
-## [2.9.5] (internal release)
+## [2.9.5] (28th November 2025)
 
 ### Fixed
 - Fixed tamper RSOD not showing.  [#6165]
@@ -90,7 +113,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Removed warning screen for some non-ERC20 contract calls.  [#6032]
 - Removed "More info" menu item from screens that don't have more info.  [#6053]
 
-## [2.9.3] (internal release)
+## [2.9.3] (21st October 2025)
+
+### Added
+
+### Changed
 
 ### Fixed
 - Fix incorrect chunkified address rendering.  [#5882]
@@ -169,10 +196,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - New UI for confirming long messages.  [#4541]
 - Solana staking confirmation dialogs.  [#4560]
 
+### Changed
+
 ### Fixed
 - Cancelling device recovery after aborting from Suite.  [#3503]
 
-## [2.8.8] (internal release)
+## [2.8.8] (19th February 2025)
 
 ### Fixed
 - Fix "PIN attempts exceeded" screen.  [#3324]
@@ -924,6 +953,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#24]: https://github.com/trezor/trezor-firmware/pull/24
 [#69]: https://github.com/trezor/trezor-firmware/pull/69
 [#262]: https://github.com/trezor/trezor-firmware/pull/262
+[#265]: https://github.com/trezor/trezor-firmware/pull/265
 [#379]: https://github.com/trezor/trezor-firmware/pull/379
 [#450]: https://github.com/trezor/trezor-firmware/pull/450
 [#642]: https://github.com/trezor/trezor-firmware/pull/642
@@ -1311,14 +1341,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6279]: https://github.com/trezor/trezor-firmware/pull/6279
 [#6281]: https://github.com/trezor/trezor-firmware/pull/6281
 [#6321]: https://github.com/trezor/trezor-firmware/pull/6321
+[#6342]: https://github.com/trezor/trezor-firmware/pull/6342
 [#6349]: https://github.com/trezor/trezor-firmware/pull/6349
 [#6358]: https://github.com/trezor/trezor-firmware/pull/6358
+[#6370]: https://github.com/trezor/trezor-firmware/pull/6370
 [#6394]: https://github.com/trezor/trezor-firmware/pull/6394
 [#6435]: https://github.com/trezor/trezor-firmware/pull/6435
 [#6448]: https://github.com/trezor/trezor-firmware/pull/6448
 [#6483]: https://github.com/trezor/trezor-firmware/pull/6483
 [#6501]: https://github.com/trezor/trezor-firmware/pull/6501
 [#6506]: https://github.com/trezor/trezor-firmware/pull/6506
+[#6520]: https://github.com/trezor/trezor-firmware/pull/6520
 [#6524]: https://github.com/trezor/trezor-firmware/pull/6524
 [#6551]: https://github.com/trezor/trezor-firmware/pull/6551
 [#6567]: https://github.com/trezor/trezor-firmware/pull/6567
@@ -1327,6 +1360,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6601]: https://github.com/trezor/trezor-firmware/pull/6601
 [#6620]: https://github.com/trezor/trezor-firmware/pull/6620
 [#6707]: https://github.com/trezor/trezor-firmware/pull/6707
+[#6709]: https://github.com/trezor/trezor-firmware/pull/6709
 [#6710]: https://github.com/trezor/trezor-firmware/pull/6710
+[#6759]: https://github.com/trezor/trezor-firmware/pull/6759
 [#6780]: https://github.com/trezor/trezor-firmware/pull/6780
 [#6807]: https://github.com/trezor/trezor-firmware/pull/6807
+[#6843]: https://github.com/trezor/trezor-firmware/pull/6843
+[#6900]: https://github.com/trezor/trezor-firmware/pull/6900
diff --git a/core/CHANGELOG.T2T1.md b/core/CHANGELOG.T2T1.md
index 9677bb74..9c53b397 100644
--- a/core/CHANGELOG.T2T1.md
+++ b/core/CHANGELOG.T2T1.md
@@ -4,6 +4,23 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.12.1] (2026-06-17)
+
+### Added
+- Added support for `AccountDelete` transaction in Ripple.  [#6370]
+- Support for Solana off-chain message signing (OCMS) v0.  [#6759]
+
+### Changed
+- Solana System Program's Transfer instruction now allows multisig.  [#6843]
+
+### Fixed
+- Hide written characters in passphrase keyboard.  [#6342]
+- Improved Tron TRX transfer flow.  [#6520]
+- Improve Stellar confirmations flows.  [#6709]
+
+### Security
+- Fix device locking if only SD card protection is enabled.  [#265]
+
 ## [2.12.0] (21st May 2026)
 
 ### Added
@@ -15,6 +32,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Fixed
 - Updated translations in Cardano flow.  [#5723]
 - Re-introduced initial blob confirmation layout for Ethereum.  [#6597]
+- Truncated device name on BLE pairing.  [#6710]
 - Fixed out-of-memory failure when confirming large input data.  [#6780]
 
 ### Security
@@ -30,6 +48,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Support WebAuthn credentials' pagination.  [#6349]
 - Added support for `VoteWitnessContract` in Tron.  [#6524]
 
+### Fixed
+
 ## [2.11.0] (18th March 2026)
 
 ### Added
@@ -58,6 +78,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Added
 - Added version build number to Features message.  [#6225]
 
+### Changed
+
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 - Fixed FIDO credentials scrolling.  [#6236]
@@ -66,12 +88,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Security
 - Fixed side-channel vulnerability in BIP-39 mnemonic processing.
 
-## [2.9.6] (internal release)
+## [2.9.6] (10th December 2025)
 
 ### Fixed
 - Fixed Stellar Amount and Bitcoin lock time font.  [#6109]
+- Make sure to increment THP `seq_bit`.  [#6138]
+- Fixed external tamper trigger clearing.  [#6186]
 
-## [2.9.5] (internal release)
+## [2.9.5] (28th November 2025)
 
 ### Fixed
 - Fixed tamper RSOD not showing.  [#6165]
@@ -92,7 +116,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Removed "More info" menu item from screens that don't have more info.  [#6053]
 - Fixed touch issue causing stuck hold-to-confirm buttons.  [#6075]
 
-## [2.9.3] (internal release)
+## [2.9.3] (21st October 2025)
+
+### Added
+
+### Changed
 
 ### Fixed
 - Fix incorrect chunkified address rendering.  [#5882]
@@ -170,6 +198,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - New UI for confirming long messages.  [#4541]
 - Solana staking confirmation dialogs.  [#4560]
 
+### Changed
+
 ### Fixed
 - Cancelling device recovery after aborting from Suite.  [#3503]
 
@@ -922,6 +952,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#24]: https://github.com/trezor/trezor-firmware/pull/24
 [#69]: https://github.com/trezor/trezor-firmware/pull/69
 [#262]: https://github.com/trezor/trezor-firmware/pull/262
+[#265]: https://github.com/trezor/trezor-firmware/pull/265
 [#379]: https://github.com/trezor/trezor-firmware/pull/379
 [#450]: https://github.com/trezor/trezor-firmware/pull/450
 [#642]: https://github.com/trezor/trezor-firmware/pull/642
@@ -1309,14 +1340,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6279]: https://github.com/trezor/trezor-firmware/pull/6279
 [#6281]: https://github.com/trezor/trezor-firmware/pull/6281
 [#6321]: https://github.com/trezor/trezor-firmware/pull/6321
+[#6342]: https://github.com/trezor/trezor-firmware/pull/6342
 [#6349]: https://github.com/trezor/trezor-firmware/pull/6349
 [#6358]: https://github.com/trezor/trezor-firmware/pull/6358
+[#6370]: https://github.com/trezor/trezor-firmware/pull/6370
 [#6394]: https://github.com/trezor/trezor-firmware/pull/6394
 [#6435]: https://github.com/trezor/trezor-firmware/pull/6435
 [#6448]: https://github.com/trezor/trezor-firmware/pull/6448
 [#6483]: https://github.com/trezor/trezor-firmware/pull/6483
 [#6501]: https://github.com/trezor/trezor-firmware/pull/6501
 [#6506]: https://github.com/trezor/trezor-firmware/pull/6506
+[#6520]: https://github.com/trezor/trezor-firmware/pull/6520
 [#6524]: https://github.com/trezor/trezor-firmware/pull/6524
 [#6551]: https://github.com/trezor/trezor-firmware/pull/6551
 [#6567]: https://github.com/trezor/trezor-firmware/pull/6567
@@ -1325,6 +1359,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6601]: https://github.com/trezor/trezor-firmware/pull/6601
 [#6620]: https://github.com/trezor/trezor-firmware/pull/6620
 [#6707]: https://github.com/trezor/trezor-firmware/pull/6707
+[#6709]: https://github.com/trezor/trezor-firmware/pull/6709
 [#6710]: https://github.com/trezor/trezor-firmware/pull/6710
+[#6759]: https://github.com/trezor/trezor-firmware/pull/6759
 [#6780]: https://github.com/trezor/trezor-firmware/pull/6780
 [#6807]: https://github.com/trezor/trezor-firmware/pull/6807
+[#6843]: https://github.com/trezor/trezor-firmware/pull/6843
+[#6900]: https://github.com/trezor/trezor-firmware/pull/6900
diff --git a/core/CHANGELOG.T3B1.md b/core/CHANGELOG.T3B1.md
index 763b85de..af27fe92 100644
--- a/core/CHANGELOG.T3B1.md
+++ b/core/CHANGELOG.T3B1.md
@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.12.1] (2026-06-17)
+
+### Added
+- Added support for `AccountDelete` transaction in Ripple.  [#6370]
+- Support for Solana off-chain message signing (OCMS) v0.  [#6759]
+
+### Changed
+- Solana System Program's Transfer instruction now allows multisig.  [#6843]
+
+### Fixed
+- Improved Tron TRX transfer flow.  [#6520]
+- Improve Stellar confirmations flows.  [#6709]
+
+### Security
+- Fix device locking if only SD card protection is enabled.  [#265]
+
 ## [2.12.0] (21st May 2026)
 
 ### Added
@@ -15,6 +31,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Fixed
 - Updated translations in Cardano flow.  [#5723]
 - Re-introduced initial blob confirmation layout for Ethereum.  [#6597]
+- Truncated device name on BLE pairing.  [#6710]
 - Fixed out-of-memory failure when confirming large input data.  [#6780]
 
 ### Security
@@ -30,6 +47,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Support WebAuthn credentials' pagination.  [#6349]
 - Added support for `VoteWitnessContract` in Tron.  [#6524]
 
+### Fixed
+
 ## [2.11.0] (18th March 2026)
 
 ### Added
@@ -58,6 +77,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Added
 - Added version build number to Features message.  [#6225]
 
+### Changed
+
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 - Fixed address chunkification in certain cases.  [#6279]
@@ -65,12 +86,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Security
 - Fixed side-channel vulnerability in BIP-39 mnemonic processing.
 
-## [2.9.6] (internal release)
+## [2.9.6] (10th December 2025)
 
 ### Fixed
 - Fixed Stellar Amount and Bitcoin lock time font.  [#6109]
+- Make sure to increment THP `seq_bit`.  [#6138]
+- Fixed external tamper trigger clearing.  [#6186]
 
-## [2.9.5] (internal release)
+## [2.9.5] (28th November 2025)
 
 ### Fixed
 - Fixed tamper RSOD not showing.  [#6165]
@@ -90,7 +113,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Removed warning screen for some non-ERC20 contract calls.  [#6032]
 - Removed "More info" menu item from screens that don't have more info.  [#6053]
 
-## [2.9.3] (internal release)
+## [2.9.3] (21st October 2025)
+
+### Added
+
+### Changed
 
 ### Fixed
 - Fix incorrect chunkified address rendering.  [#5882]
@@ -171,10 +198,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - New UI for confirming long messages.  [#4541]
 - Solana staking confirmation dialogs.  [#4560]
 
+### Changed
+
 ### Fixed
 - Cancelling device recovery after aborting from Suite.  [#3503]
 
-## [2.8.8] (internal release)
+## [2.8.8] (19th February 2025)
 
 ### Fixed
 - Fix "PIN attempts exceeded" screen.  [#3324]
@@ -917,6 +946,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#24]: https://github.com/trezor/trezor-firmware/pull/24
 [#69]: https://github.com/trezor/trezor-firmware/pull/69
 [#262]: https://github.com/trezor/trezor-firmware/pull/262
+[#265]: https://github.com/trezor/trezor-firmware/pull/265
 [#379]: https://github.com/trezor/trezor-firmware/pull/379
 [#450]: https://github.com/trezor/trezor-firmware/pull/450
 [#642]: https://github.com/trezor/trezor-firmware/pull/642
@@ -1304,14 +1334,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6279]: https://github.com/trezor/trezor-firmware/pull/6279
 [#6281]: https://github.com/trezor/trezor-firmware/pull/6281
 [#6321]: https://github.com/trezor/trezor-firmware/pull/6321
+[#6342]: https://github.com/trezor/trezor-firmware/pull/6342
 [#6349]: https://github.com/trezor/trezor-firmware/pull/6349
 [#6358]: https://github.com/trezor/trezor-firmware/pull/6358
+[#6370]: https://github.com/trezor/trezor-firmware/pull/6370
 [#6394]: https://github.com/trezor/trezor-firmware/pull/6394
 [#6435]: https://github.com/trezor/trezor-firmware/pull/6435
 [#6448]: https://github.com/trezor/trezor-firmware/pull/6448
 [#6483]: https://github.com/trezor/trezor-firmware/pull/6483
 [#6501]: https://github.com/trezor/trezor-firmware/pull/6501
 [#6506]: https://github.com/trezor/trezor-firmware/pull/6506
+[#6520]: https://github.com/trezor/trezor-firmware/pull/6520
 [#6524]: https://github.com/trezor/trezor-firmware/pull/6524
 [#6551]: https://github.com/trezor/trezor-firmware/pull/6551
 [#6567]: https://github.com/trezor/trezor-firmware/pull/6567
@@ -1320,6 +1353,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6601]: https://github.com/trezor/trezor-firmware/pull/6601
 [#6620]: https://github.com/trezor/trezor-firmware/pull/6620
 [#6707]: https://github.com/trezor/trezor-firmware/pull/6707
+[#6709]: https://github.com/trezor/trezor-firmware/pull/6709
 [#6710]: https://github.com/trezor/trezor-firmware/pull/6710
+[#6759]: https://github.com/trezor/trezor-firmware/pull/6759
 [#6780]: https://github.com/trezor/trezor-firmware/pull/6780
 [#6807]: https://github.com/trezor/trezor-firmware/pull/6807
+[#6843]: https://github.com/trezor/trezor-firmware/pull/6843
+[#6900]: https://github.com/trezor/trezor-firmware/pull/6900
diff --git a/core/CHANGELOG.T3T1.md b/core/CHANGELOG.T3T1.md
index 03454d54..0408479f 100644
--- a/core/CHANGELOG.T3T1.md
+++ b/core/CHANGELOG.T3T1.md
@@ -4,6 +4,23 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.12.1] (2026-06-17)
+
+### Added
+- Added support for `AccountDelete` transaction in Ripple.  [#6370]
+- Support for Solana off-chain message signing (OCMS) v0.  [#6759]
+
+### Changed
+- Solana System Program's Transfer instruction now allows multisig.  [#6843]
+
+### Fixed
+- Hide written characters in passphrase keyboard.  [#6342]
+- Improved Tron TRX transfer flow.  [#6520]
+- Improve Stellar confirmations flows.  [#6709]
+
+### Security
+- Fix device locking if only SD card protection is enabled.  [#265]
+
 ## [2.12.0] (21st May 2026)
 
 ### Added
@@ -16,6 +33,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Fixed
 - Updated translations in Cardano flow.  [#5723]
 - Re-introduced initial blob confirmation layout for Ethereum.  [#6597]
+- Truncated device name on BLE pairing.  [#6710]
 - Fixed out-of-memory failure when confirming large input data.  [#6780]
 
 ### Security
@@ -31,6 +49,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Support WebAuthn credentials' pagination.  [#6349]
 - Added support for `VoteWitnessContract` in Tron.  [#6524]
 
+### Fixed
+
 ## [2.11.0] (18th March 2026)
 
 ### Added
@@ -59,18 +79,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Added
 - Added version build number to Features message.  [#6225]
 
+### Changed
+
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 
 ### Security
 - Fixed side-channel vulnerability in BIP-39 mnemonic processing.
 
-## [2.9.6] (internal release)
+## [2.9.6] (10th December 2025)
 
 ### Fixed
 - Fixed Stellar Amount and Bitcoin lock time font.  [#6109]
+- Make sure to increment THP `seq_bit`.  [#6138]
+- Fixed external tamper trigger clearing.  [#6186]
 
-## [2.9.5] (internal release)
+## [2.9.5] (28th November 2025)
 
 ### Fixed
 - Fixed tamper RSOD not showing.  [#6165]
@@ -91,7 +115,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Removed "More info" menu item from screens that don't have more info.  [#6053]
 - Fixed touch issue causing stuck hold-to-confirm buttons.  [#6075]
 
-## [2.9.3] (internal release)
+## [2.9.3] (21st October 2025)
+
+### Added
+
+### Changed
 
 ### Fixed
 - Fix incorrect chunkified address rendering.  [#5882]
@@ -182,7 +210,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Fixed
 - Cancelling device recovery after aborting from Suite.  [#3503]
 
-## [2.8.8] (internal release)
+## [2.8.8] (19th February 2025)
 
 ### Fixed
 - Fixed flashing old content when fading.  [#4492]
@@ -965,6 +993,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#24]: https://github.com/trezor/trezor-firmware/pull/24
 [#69]: https://github.com/trezor/trezor-firmware/pull/69
 [#262]: https://github.com/trezor/trezor-firmware/pull/262
+[#265]: https://github.com/trezor/trezor-firmware/pull/265
 [#379]: https://github.com/trezor/trezor-firmware/pull/379
 [#450]: https://github.com/trezor/trezor-firmware/pull/450
 [#642]: https://github.com/trezor/trezor-firmware/pull/642
@@ -1352,14 +1381,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6279]: https://github.com/trezor/trezor-firmware/pull/6279
 [#6281]: https://github.com/trezor/trezor-firmware/pull/6281
 [#6321]: https://github.com/trezor/trezor-firmware/pull/6321
+[#6342]: https://github.com/trezor/trezor-firmware/pull/6342
 [#6349]: https://github.com/trezor/trezor-firmware/pull/6349
 [#6358]: https://github.com/trezor/trezor-firmware/pull/6358
+[#6370]: https://github.com/trezor/trezor-firmware/pull/6370
 [#6394]: https://github.com/trezor/trezor-firmware/pull/6394
 [#6435]: https://github.com/trezor/trezor-firmware/pull/6435
 [#6448]: https://github.com/trezor/trezor-firmware/pull/6448
 [#6483]: https://github.com/trezor/trezor-firmware/pull/6483
 [#6501]: https://github.com/trezor/trezor-firmware/pull/6501
 [#6506]: https://github.com/trezor/trezor-firmware/pull/6506
+[#6520]: https://github.com/trezor/trezor-firmware/pull/6520
 [#6524]: https://github.com/trezor/trezor-firmware/pull/6524
 [#6551]: https://github.com/trezor/trezor-firmware/pull/6551
 [#6567]: https://github.com/trezor/trezor-firmware/pull/6567
@@ -1368,6 +1400,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6601]: https://github.com/trezor/trezor-firmware/pull/6601
 [#6620]: https://github.com/trezor/trezor-firmware/pull/6620
 [#6707]: https://github.com/trezor/trezor-firmware/pull/6707
+[#6709]: https://github.com/trezor/trezor-firmware/pull/6709
 [#6710]: https://github.com/trezor/trezor-firmware/pull/6710
+[#6759]: https://github.com/trezor/trezor-firmware/pull/6759
 [#6780]: https://github.com/trezor/trezor-firmware/pull/6780
 [#6807]: https://github.com/trezor/trezor-firmware/pull/6807
+[#6843]: https://github.com/trezor/trezor-firmware/pull/6843
+[#6900]: https://github.com/trezor/trezor-firmware/pull/6900
diff --git a/core/CHANGELOG.T3W1.md b/core/CHANGELOG.T3W1.md
index 850334f1..8b80213b 100644
--- a/core/CHANGELOG.T3W1.md
+++ b/core/CHANGELOG.T3W1.md
@@ -4,6 +4,24 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.12.1] (2026-06-17)
+
+### Added
+- Added support for `AccountDelete` transaction in Ripple.  [#6370]
+- Support for Solana off-chain message signing (OCMS) v0.  [#6759]
+- Added MCU device attestation with ML-DSA-44.  [#6807]
+- Added Tap to Wake setting in device menu.  [#6900]
+
+### Changed
+- Solana System Program's Transfer instruction now allows multisig.  [#6843]
+
+### Fixed
+- Improved Tron TRX transfer flow.  [#6520]
+- Improve Stellar confirmations flows.  [#6709]
+
+### Security
+- Fix device locking if only SD card protection is enabled.  [#265]
+
 ## [2.12.0] (21st May 2026)
 
 ### Added
@@ -136,6 +154,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Exit pairing screen when already paired host connects.  [#5897]
 
 [#69]: https://github.com/trezor/trezor-firmware/pull/69
+[#265]: https://github.com/trezor/trezor-firmware/pull/265
 [#5358]: https://github.com/trezor/trezor-firmware/pull/5358
 [#5723]: https://github.com/trezor/trezor-firmware/pull/5723
 [#5845]: https://github.com/trezor/trezor-firmware/pull/5845
@@ -182,12 +201,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6321]: https://github.com/trezor/trezor-firmware/pull/6321
 [#6349]: https://github.com/trezor/trezor-firmware/pull/6349
 [#6358]: https://github.com/trezor/trezor-firmware/pull/6358
+[#6370]: https://github.com/trezor/trezor-firmware/pull/6370
 [#6394]: https://github.com/trezor/trezor-firmware/pull/6394
 [#6435]: https://github.com/trezor/trezor-firmware/pull/6435
 [#6448]: https://github.com/trezor/trezor-firmware/pull/6448
 [#6483]: https://github.com/trezor/trezor-firmware/pull/6483
 [#6501]: https://github.com/trezor/trezor-firmware/pull/6501
 [#6506]: https://github.com/trezor/trezor-firmware/pull/6506
+[#6520]: https://github.com/trezor/trezor-firmware/pull/6520
 [#6524]: https://github.com/trezor/trezor-firmware/pull/6524
 [#6551]: https://github.com/trezor/trezor-firmware/pull/6551
 [#6567]: https://github.com/trezor/trezor-firmware/pull/6567
@@ -196,5 +217,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6601]: https://github.com/trezor/trezor-firmware/pull/6601
 [#6620]: https://github.com/trezor/trezor-firmware/pull/6620
 [#6707]: https://github.com/trezor/trezor-firmware/pull/6707
+[#6709]: https://github.com/trezor/trezor-firmware/pull/6709
 [#6710]: https://github.com/trezor/trezor-firmware/pull/6710
+[#6759]: https://github.com/trezor/trezor-firmware/pull/6759
 [#6780]: https://github.com/trezor/trezor-firmware/pull/6780
+[#6807]: https://github.com/trezor/trezor-firmware/pull/6807
+[#6843]: https://github.com/trezor/trezor-firmware/pull/6843
+[#6900]: https://github.com/trezor/trezor-firmware/pull/6900
diff --git a/core/CHANGELOG.md b/core/CHANGELOG.md
index c08f8ff8..bd0a56ce 100644
--- a/core/CHANGELOG.md
+++ b/core/CHANGELOG.md
@@ -4,6 +4,25 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.12.1] (2026-06-17)
+
+### Added
+- Added support for `AccountDelete` transaction in Ripple.  [#6370]
+- Support for Solana off-chain message signing (OCMS) v0.  [#6759]
+- [T3W1] Added MCU device attestation with ML-DSA-44.  [#6807]
+- [T3W1] Added Tap to Wake setting in device menu.  [#6900]
+
+### Changed
+- Solana System Program's Transfer instruction now allows multisig.  [#6843]
+
+### Fixed
+- [T2T1,T3T1] Hide written characters in passphrase keyboard.  [#6342]
+- Improved Tron TRX transfer flow.  [#6520]
+- Improve Stellar confirmations flows.  [#6709]
+
+### Security
+- Fix device locking if only SD card protection is enabled.  [#265]
+
 ## [2.12.0] (21st May 2026)
 
 ### Added
@@ -1044,6 +1063,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#24]: https://github.com/trezor/trezor-firmware/pull/24
 [#69]: https://github.com/trezor/trezor-firmware/pull/69
 [#262]: https://github.com/trezor/trezor-firmware/pull/262
+[#265]: https://github.com/trezor/trezor-firmware/pull/265
 [#379]: https://github.com/trezor/trezor-firmware/pull/379
 [#450]: https://github.com/trezor/trezor-firmware/pull/450
 [#642]: https://github.com/trezor/trezor-firmware/pull/642
@@ -1431,14 +1451,17 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6279]: https://github.com/trezor/trezor-firmware/pull/6279
 [#6281]: https://github.com/trezor/trezor-firmware/pull/6281
 [#6321]: https://github.com/trezor/trezor-firmware/pull/6321
+[#6342]: https://github.com/trezor/trezor-firmware/pull/6342
 [#6349]: https://github.com/trezor/trezor-firmware/pull/6349
 [#6358]: https://github.com/trezor/trezor-firmware/pull/6358
+[#6370]: https://github.com/trezor/trezor-firmware/pull/6370
 [#6394]: https://github.com/trezor/trezor-firmware/pull/6394
 [#6435]: https://github.com/trezor/trezor-firmware/pull/6435
 [#6448]: https://github.com/trezor/trezor-firmware/pull/6448
 [#6483]: https://github.com/trezor/trezor-firmware/pull/6483
 [#6501]: https://github.com/trezor/trezor-firmware/pull/6501
 [#6506]: https://github.com/trezor/trezor-firmware/pull/6506
+[#6520]: https://github.com/trezor/trezor-firmware/pull/6520
 [#6524]: https://github.com/trezor/trezor-firmware/pull/6524
 [#6551]: https://github.com/trezor/trezor-firmware/pull/6551
 [#6567]: https://github.com/trezor/trezor-firmware/pull/6567
@@ -1447,5 +1470,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6601]: https://github.com/trezor/trezor-firmware/pull/6601
 [#6620]: https://github.com/trezor/trezor-firmware/pull/6620
 [#6707]: https://github.com/trezor/trezor-firmware/pull/6707
+[#6709]: https://github.com/trezor/trezor-firmware/pull/6709
 [#6710]: https://github.com/trezor/trezor-firmware/pull/6710
+[#6759]: https://github.com/trezor/trezor-firmware/pull/6759
 [#6780]: https://github.com/trezor/trezor-firmware/pull/6780
+[#6807]: https://github.com/trezor/trezor-firmware/pull/6807
+[#6843]: https://github.com/trezor/trezor-firmware/pull/6843
+[#6900]: https://github.com/trezor/trezor-firmware/pull/6900

Risk score

Why this scored 43/100

Our methodology →

Potential impact 12/30

Exploitability 8/25

Stealth signal 6/15

Affected reach 10/15

Confidence 5/10

Evidence quality 2/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 43/100

Community notes

Related watches

fix(l10n): fix German recover button text

fix(core): limit protobuf nesting depth

refactor(python): faster serialization of nested protobuf