Low 30 Bitcoin Committed May 14, 2026 · 17:08 UTC

build: prevent uv from using packages newer than 30 days

b4b7f5cf View source ↗

Public commit record

What the developer wrote

Authored by matejcik

98/100 · Strong

build: prevent uv from using packages newer than 30 days

- Limits exposure of the repo to supply chain compromise -- as long as you use uv.
- Downgraded Mako (path traversal vulnerability is irrelevant for us).
- If a relevant security is available, we'll have to whitelist that package -- use `exclude-newer-package` (https://docs.astral.sh/uv/reference/settings/#exclude-newer-package).
- Switched buildsystem declaration from hatchling to flit everywhere.

[no changelog]

✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference✓ Names security-relevant behavior explicitly

The short version

What changed, and why it matters

This commit is a hardening change to Trezor's build tooling. It tells the Python package manager 'uv' not to use any package uploaded to PyPI in the last 30 days, which reduces the risk of accidentally pulling in a freshly compromised dependency. It also downgrades the 'Mako' template library from 1.3.12 to 1.3.10 and switches the build system from 'hatchling' to 'flit' in several sub-projects. The commit message explicitly says the goal is to limit supply-chain compromise exposure.

Recommended action

No immediate action is required; this is a defensive build-hardening commit. Users and downstream builders should ensure they use `uv` so the `exclude-newer` policy is enforced, and monitor the whitelist (`exclude-newer-package`) if a security-relevant update needs to be adopted within the 30-day window.

Security signals we found

Supply-chain hardening via uv exclude-newer policy

Dependency downgrade (Mako 1.3.12 -> 1.3.10)

Build backend migration (hatchling -> flit_core)

Commit message explicitly frames change as limiting supply chain compromise exposure

Technical analysis

Evidence from the diff

The patch adds exclude-newer = "30 days" under [tool.uv] in five pyproject.toml files and records the corresponding lockfile options in uv.lock. It also downgrades Mako from >=1.3.12,<2 to >=1.3.10,<2, noting in the commit message that a path-traversal vulnerability in Mako is irrelevant for Trezor’s use. Finally, it replaces hatchling with flit_core as the PEP 517 build backend in core/tools, python/tools/toiftool, and tools/trezor-pylint-plugin. The change is defensive: it narrows the window during which a newly published malicious or vulnerable package can be resolved automatically.

Changed components

core/tools/pyproject.tomlpyproject.tomlpython/pyproject.tomlpython/tools/toiftool/pyproject.tomltools/trezor-pylint-plugin/pyproject.tomluv.lock

Inspect captured patch +24 / −11

diff --git a/core/tools/pyproject.toml b/core/tools/pyproject.toml
index 11889af1..d00dc073 100644
--- a/core/tools/pyproject.toml
+++ b/core/tools/pyproject.toml
@@ -18,11 +18,12 @@ combine_firmware = "trezor_core_tools.combine_firmware:main"
 bootloader_hashes = "trezor_core_tools.bootloader_hashes:main"
 
 [build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
+requires = ["flit_core >= 3.11,<5"]
+build-backend = "flit_core.buildapi"
 
 [tool.uv]
 package = true
+exclude-newer = "30 days"
 
 [tool.uv.sources]
 trezor = { path = "../../python", editable = true }
diff --git a/pyproject.toml b/pyproject.toml
index ba1dcab1..0c058817 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -28,7 +28,7 @@ dependencies = [
     "isort>=5,<6",
     "flake8>=7",
     "black>=24.2",
-    "mako>=1.3.12,<2",
+    "mako>=1.3.10,<2",
     "munch>=4,<5",
     "autoflake",
     "flake8-requirements>=2.1.0",
@@ -71,6 +71,7 @@ dev = [
 
 [tool.uv]
 package = false
+exclude-newer = "30 days"
 
 [tool.uv.sources]
 trezor = { path = "./python", editable = true }
diff --git a/python/pyproject.toml b/python/pyproject.toml
index 8943e59b..3d87804a 100644
--- a/python/pyproject.toml
+++ b/python/pyproject.toml
@@ -65,6 +65,7 @@ build-backend = "flit_core.buildapi"
 
 [tool.uv]
 package = true
+exclude-newer = "30 days"
 
 [tool.flit.module]
 name = "trezorlib"
diff --git a/python/tools/toiftool/pyproject.toml b/python/tools/toiftool/pyproject.toml
index f0ff24ef..8c7bbf31 100644
--- a/python/tools/toiftool/pyproject.toml
+++ b/python/tools/toiftool/pyproject.toml
@@ -1,6 +1,6 @@
 [build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
+requires = ["flit_core >= 3.11,<5"]
+build-backend = "flit_core.buildapi"
 
 [project]
 name = "toiftool"
@@ -17,3 +17,6 @@ dependencies = [
 
 [project.scripts]
 toiftool = "toiftool:cli"
+
+[tool.uv]
+exclude-newer = "30 days"
diff --git a/tools/trezor-pylint-plugin/pyproject.toml b/tools/trezor-pylint-plugin/pyproject.toml
index 30133f8b..3df221a2 100644
--- a/tools/trezor-pylint-plugin/pyproject.toml
+++ b/tools/trezor-pylint-plugin/pyproject.toml
@@ -1,6 +1,6 @@
 [build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
+requires = ["flit_core >= 3.11,<5"]
+build-backend = "flit_core.buildapi"
 
 [project]
 name = "trezor-pylint-plugin"
@@ -13,3 +13,6 @@ dependencies = [
     "pylint",
     "astroid",
 ]
+
+[tool.uv]
+exclude-newer = "30 days"
diff --git a/uv.lock b/uv.lock
index 5403f7ec..0de3e76d 100644
--- a/uv.lock
+++ b/uv.lock
@@ -7,6 +7,10 @@ resolution-markers = [
     "python_full_version < '3.11'",
 ]
 
+[options]
+exclude-newer = "2026-04-13T16:19:12.502244419Z"
+exclude-newer-span = "P30D"
+
 [[package]]
 name = "astroid"
 version = "2.15.8"
@@ -1084,14 +1088,14 @@ wheels = [
 
 [[package]]
 name = "mako"
-version = "1.3.12"
+version = "1.3.10"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "markupsafe" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/00/62/791b31e69ae182791ec67f04850f2f062716bbd205483d63a215f3e062d3/mako-1.3.12.tar.gz", hash = "sha256:9f778e93289bd410bb35daadeb4fc66d95a746f0b75777b942088b7fd7af550a", size = 400219, upload-time = "2026-04-28T19:01:08.512Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/9e/38/bd5b78a920a64d708fe6bc8e0a2c075e1389d53bef8413725c63ba041535/mako-1.3.10.tar.gz", hash = "sha256:99579a6f39583fa7e5630a28c3c1f440e4e97a414b80372649c0ce338da2ea28", size = 392474, upload-time = "2025-04-10T12:44:31.16Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/bc/b1/a0ec7a5a9db730a08daef1fdfb8090435b82465abbf758a596f0ea88727e/mako-1.3.12-py3-none-any.whl", hash = "sha256:8f61569480282dbf557145ce441e4ba888be453c30989f879f0d652e39f53ea9", size = 78521, upload-time = "2026-04-28T19:01:10.393Z" },
+    { url = "https://files.pythonhosted.org/packages/87/fb/99f81ac72ae23375f22b7afdb7642aba97c00a713c217124420147681a2f/mako-1.3.10-py3-none-any.whl", hash = "sha256:baef24a52fc4fc514a0887ac600f9f1cff3d82c61d4d700a1fa84d597b88db59", size = 78509, upload-time = "2025-04-10T12:50:53.297Z" },
 ]
 
 [[package]]
@@ -2345,7 +2349,7 @@ requires-dist = [
     { name = "inotify" },
     { name = "intelhex", specifier = "==2.3.0" },
     { name = "isort", specifier = ">=5,<6" },
-    { name = "mako", specifier = ">=1.3.12,<2" },
+    { name = "mako", specifier = ">=1.3.10,<2" },
     { name = "mnemonic", specifier = ">=0.21,<0.22" },
     { name = "munch", specifier = ">=4,<5" },
     { name = "nanopb", specifier = ">=0.4.3,<0.5" },

Risk score

Why this scored 30/100

Our methodology →

Potential impact 5/30

Exploitability 3/25

Stealth signal 4/15

Affected reach 6/15

Confidence 8/10

Evidence quality 4/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 30/100

Community notes

Related watches

fix(python/trezorlib): enable entropy check on T1 by default

chore(core): remove scons related files

refactor(core): assorted micropython-1.28.0 fixes