Informational 15 Bitcoin Committed Jan 26, 2026 · 13:50 UTC

chore(core): bump VERSION & FIX_VERSION to 2.10.0

f5309443 View source ↗

Public commit record

What the developer wrote

Authored by obrusvit

85/100 · Strong

chore(core): bump VERSION & FIX_VERSION to 2.10.0

- security fix forces us to bump FIX_VERSION
- semantically, it means bumping VERSION_MINOR
- also modify CHANGELOGs from 2.9.7 to 2.10.0

[no changelog]

(cherry picked from commit 25b05677cad6b1c3e17dc32576be8c14a064ad17)

✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Names security-relevant behavior explicitly

The short version

What changed, and why it matters

This commit only changes version numbers and release metadata. It bumps the firmware version from 2.9.7 to 2.10.0 and updates related changelog entries and translation package signatures. The commit message mentions that a separate security fix forced the version bump, but this commit itself does not contain any code fix.

Recommended action

No action needed for this commit. Review the actual security fix commit referenced by the changelog (issue #200 / side-channel vulnerability in BIP-39 mnemonic processing) separately.

Security signals we found

Commit message references a 'security fix' as the reason for the version bump

Changelog for T3B1 already lists a 'Security' entry: 'Fixed side-channel vulnerability in BIP-39 mnemonic processing'

No actual security patch is present in this commit

Technical analysis

Evidence from the diff

The diff is purely administrative: it updates VERSION_MINOR to 10 and FIX_VERSION_MINOR to 10 in version.h, renames the 2.9.7 release to 2.10.0 in releases.json and multiple CHANGELOG files, removes an empty ‘Changed’ section, and refreshes translation signature metadata. No source code logic is modified.

Changed components

core/embed/projects/firmware/version.hcommon/releases.jsoncore/CHANGELOG*.md filescore/translations/*.json metadata

Inspect captured patch +19 / −27

diff --git a/common/releases.json b/common/releases.json
index 30560713..463703f0 100644
--- a/common/releases.json
+++ b/common/releases.json
@@ -92,6 +92,6 @@
         "2.9.4": ["T2B1", "T2T1", "T3B1", "T3T1", "T3W1"],
         "2.9.5": ["T3W1"],
         "2.9.6": ["T3W1"],
-        "2.9.7": ["T2B1", "T2T1", "T3B1", "T3T1", "T3W1"]
+        "2.10.0": ["T2B1", "T2T1", "T3B1", "T3T1", "T3W1"]
     }
 }
diff --git a/core/CHANGELOG.T2B1.md b/core/CHANGELOG.T2B1.md
index 4e73cfae..ef268d81 100644
--- a/core/CHANGELOG.T2B1.md
+++ b/core/CHANGELOG.T2B1.md
@@ -4,13 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [2.9.7] (21st January 2026)
+## [2.10.0] (21st January 2026)
 
 ### Added
 - Added version build number to Features message.  [#6225]
 
-### Changed
-
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 - Fixed address chunkification in certain cases.  [#6279]
diff --git a/core/CHANGELOG.T2T1.md b/core/CHANGELOG.T2T1.md
index 05950665..027242d6 100644
--- a/core/CHANGELOG.T2T1.md
+++ b/core/CHANGELOG.T2T1.md
@@ -4,13 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [2.9.7] (21st January 2026)
+## [2.10.0] (21st January 2026)
 
 ### Added
 - Added version build number to Features message.  [#6225]
 
-### Changed
-
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 - Fixed FIDO credentials scrolling.  [#6236]
diff --git a/core/CHANGELOG.T3B1.md b/core/CHANGELOG.T3B1.md
index 1951e2a4..027f46f3 100644
--- a/core/CHANGELOG.T3B1.md
+++ b/core/CHANGELOG.T3B1.md
@@ -4,19 +4,17 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [2.9.7] (21st January 2026)
+## [2.10.0] (21st January 2026)
 
 ### Added
 - Added version build number to Features message.  [#6225]
 
-### Changed
-
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 - Fixed address chunkification in certain cases.  [#6279]
 
 ### Security
-- Fixed side-channel vulnerability in BIP-39 mnemonic processing.  [#200]
+- Fixed side-channel vulnerability in BIP-39 mnemonic processing.
 
 ## [2.9.6] (internal release)
 
diff --git a/core/CHANGELOG.T3T1.md b/core/CHANGELOG.T3T1.md
index 934b088b..b36d0793 100644
--- a/core/CHANGELOG.T3T1.md
+++ b/core/CHANGELOG.T3T1.md
@@ -4,13 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [2.9.7] (21st January 2026)
+## [2.10.0] (21st January 2026)
 
 ### Added
 - Added version build number to Features message.  [#6225]
 
-### Changed
-
 ### Fixed
 - Allow loading translations with different BUILD_VERSION.  [#6228]
 
diff --git a/core/CHANGELOG.T3W1.md b/core/CHANGELOG.T3W1.md
index 93d1f6f0..bab30e91 100644
--- a/core/CHANGELOG.T3W1.md
+++ b/core/CHANGELOG.T3W1.md
@@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [2.9.7] (21st January 2026)
+## [2.10.0] (21st January 2026)
 
 ### Added
 - Reset Tropic and retry command when alarm mode is detected.  [#6104]
diff --git a/core/CHANGELOG.md b/core/CHANGELOG.md
index 3c935b99..1c2d1252 100644
--- a/core/CHANGELOG.md
+++ b/core/CHANGELOG.md
@@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [2.9.7] (21st January 2026)
+## [2.10.0] (21st January 2026)
 
 ### Added
 - [T3W1] Reset Tropic and retry command when alarm mode is detected.  [#6104]
diff --git a/core/embed/projects/firmware/version.h b/core/embed/projects/firmware/version.h
index aef5c49a..289051c0 100644
--- a/core/embed/projects/firmware/version.h
+++ b/core/embed/projects/firmware/version.h
@@ -4,10 +4,10 @@
 
 #define VERSION_MAJOR 2
 #define VERSION_MINOR 10
-#define VERSION_PATCH 1
+#define VERSION_PATCH 0
 #define VERSION_BUILD 0
 
 #define FIX_VERSION_MAJOR 2
-#define FIX_VERSION_MINOR 9
+#define FIX_VERSION_MINOR 10
 #define FIX_VERSION_PATCH 0
 #define FIX_VERSION_BUILD 0
diff --git a/core/translations/cs.json b/core/translations/cs.json
index 6f1e1242..136f0a18 100644
--- a/core/translations/cs.json
+++ b/core/translations/cs.json
@@ -33,7 +33,7 @@
   },
   "header": {
     "language": "cs-CZ",
-    "version": "2.10.1"
+    "version": "2.10.0"
   },
   "translations": {
     "addr_mismatch__contact_support_at": {
diff --git a/core/translations/de.json b/core/translations/de.json
index 42e33847..a73a9336 100644
--- a/core/translations/de.json
+++ b/core/translations/de.json
@@ -33,7 +33,7 @@
   },
   "header": {
     "language": "de-DE",
-    "version": "2.10.1"
+    "version": "2.10.0"
   },
   "translations": {
     "addr_mismatch__contact_support_at": "Kontaktiere den Trezor Support unter",
diff --git a/core/translations/en.json b/core/translations/en.json
index e945a499..f85b4ab8 100644
--- a/core/translations/en.json
+++ b/core/translations/en.json
@@ -1,7 +1,7 @@
 {
   "header": {
     "language": "en-US",
-    "version": "2.10.1"
+    "version": "2.10.0"
   },
   "translations": {
     "addr_mismatch__contact_support_at": "Please contact Trezor support at",
diff --git a/core/translations/es.json b/core/translations/es.json
index b2676c44..70eecf40 100644
--- a/core/translations/es.json
+++ b/core/translations/es.json
@@ -33,7 +33,7 @@
   },
   "header": {
     "language": "es-ES",
-    "version": "2.10.1"
+    "version": "2.10.0"
   },
   "translations": {
     "addr_mismatch__contact_support_at": "Contacta con atención al cliente de Trezor en",
diff --git a/core/translations/fr.json b/core/translations/fr.json
index 03b296f8..99ad7996 100644
--- a/core/translations/fr.json
+++ b/core/translations/fr.json
@@ -33,7 +33,7 @@
   },
   "header": {
     "language": "fr-FR",
-    "version": "2.10.1"
+    "version": "2.10.0"
   },
   "translations": {
     "addr_mismatch__contact_support_at": {
diff --git a/core/translations/pt.json b/core/translations/pt.json
index 9b421a14..e20b9fed 100644
--- a/core/translations/pt.json
+++ b/core/translations/pt.json
@@ -33,7 +33,7 @@
   },
   "header": {
     "language": "pt-BR",
-    "version": "2.10.1"
+    "version": "2.10.0"
   },
   "translations": {
     "addr_mismatch__contact_support_at": "Entre em contato com o suporte Trezor em",
diff --git a/core/translations/signatures.json b/core/translations/signatures.json
index ba0a9793..52c0bb94 100644
--- a/core/translations/signatures.json
+++ b/core/translations/signatures.json
@@ -1,8 +1,8 @@
 {
   "current": {
-    "merkle_root": "2cdefc083b575b3cfd4723135a04663f84de36a6940f6a16a78ec1c05fc85e1a",
-    "datetime": "2026-01-06T13:18:35.997250+00:00",
-    "commit": "20ea3aee526ded59599702390909be4f3af42199"
+    "merkle_root": "8bfff298381f25e1a7bbd577c04ba3f28df808f42419fea8d61a75be17f24828",
+    "datetime": "2026-01-05T15:08:41.779965+00:00",
+    "commit": "03ef48ee069221df0c6b1aa3667cddcaeb3508be"
   },
   "history": [
     {

Risk score

Why this scored 15/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 10/10

Evidence quality 5/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 15/100

Community notes

Related watches

fix(python/trezorlib): enable entropy check on T1 by default

chore(core): remove scons related files

refactor(core): assorted micropython-1.28.0 fixes