What the developer wrote
Authored by Roman Zeyde
chore(core): sign translations
[no changelog]
(cherry picked from commit 3d00dda8027a945857f1c3869601c035e96deaee)
What changed, and why it matters
This commit simply adds a new cryptographic signature entry to a JSON file that records approved translation bundles for the Trezor hardware wallet. There is no code change, no bug fix, and no visible security issue in the diff itself.
No action required based on this diff. As with any signature-list update, verify out-of-band that the new signature, version, and merkle_root correspond to an officially released and reviewed translation bundle.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change appends one record to core/translations/signatures.json containing a signature, version string (2.11.0.0), merkle_root, datetime, and commit hash. The file appears to be a signed manifest/audit log for translation blobs. The diff only inserts a new history entry; it does not modify validation logic, keys, or any executable code.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 022eb1a0..3a2a4f8a 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "f7b77a709aad3e90bda2706010424a3035952b6f"
},
"history": [
+ {
+ "signature": "03dd6832fe00b101d62ee5393a0e323040891338c4b1769541c8bb89f0421945382b750ae84588dc237ee0709c0333b53f87e970c6d8e01a9f1af3819827ffdc02",
+ "version": "2.11.0.0",
+ "merkle_root": "70d9d7e923002519046c4194aa6b671a9b438ba2b8bd2682c1468cc240228ffe",
+ "datetime": "2026-03-03T14:06:35.558007+00:00",
+ "commit": "725c0c01879329900f08fc453d8fd0fcb4d86090"
+ },
{
"signature": "03b1a8a01a18bada5b21ae798aff7d735c5ad7036da80f660d61039b5aa56bc9a1abe9be4aafec86416d97fba2931822028a3b8a0e5ded09ace19b0991e3788103",
"version": "2.9.6.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.