What changed, and why it matters
This commit simply adds a new digital signature entry to a JSON file that records approved translation bundles for the Trezor hardware wallet. It is a routine metadata update with no code changes and no apparent security relevance.
No action required; treat as routine maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff appends one new object to core/translations/signatures.json containing a signature, version string (2.9.4.0), merkle_root, datetime, and commit hash. No executable code, cryptographic algorithms, or access-control logic is modified. The change is consistent with the file’s existing purpose of tracking signed translation releases.
Changed components
core/translations/signatures.jsonInspect captured patch +7 / −0
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index 82092f79..8bf439fb 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -5,6 +5,13 @@
"commit": "69056d572559c551422de368c621c76cd03ccc6b"
},
"history": [
+ {
+ "signature": "03bdb5f1adee3d2e35f805422fb17bc237c626831cf1ce463b75ae78120b40d53d44652176aceec7fdaed5291147e11aecfb782cf962c8f08c0358cf17929f8f00",
+ "version": "2.9.4.0",
+ "merkle_root": "5d92167a3b0923534be8c08fac5dd40a9560e9a957538e6b07830b5c6faf7ee0",
+ "datetime": "2025-11-06T16:55:50.753257+00:00",
+ "commit": "ccf73fd0e9450b2407cd65f91cb06161454fc72b"
+ },
{
"signature": "034b4dd4ac62ee0c513a704a2188eae2974e35ebabbf79c64a44c99030f52aa3314548102c03e15d7bd3078e3fb4c3973b7757f46394ce6bce6c5449ed8d7e0102",
"version": "2.9.3.0",
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.