Rebase release/25.11.1 over main

common/releases.json

@@ -87,6 +87,7 @@
         "2.9.1": ["T2B1", "T2T1", "T3B1", "T3T1"],
         "2.9.2": ["T3W1"],
         "2.9.3": ["T3W1"],
-        "2.9.4": ["T2B1", "T2T1", "T3B1", "T3T1", "T3W1"]
+        "2.9.4": ["T2B1", "T2T1", "T3B1", "T3T1", "T3W1"],
+        "2.9.5": ["T3W1"]
     }
 }

core/CHANGELOG.T2B1.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.9.5] (internal release)
+
+### Fixed
+- Fixed tamper RSOD not showing.  [#6165]
+
 ## [2.9.4] (19th November 2025)
 
 ### Added
@@ -1219,3 +1224,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6076]: https://github.com/trezor/trezor-firmware/pull/6076
 [#6096]: https://github.com/trezor/trezor-firmware/pull/6096
 [#6100]: https://github.com/trezor/trezor-firmware/pull/6100
+[#6165]: https://github.com/trezor/trezor-firmware/pull/6165

core/CHANGELOG.T2T1.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.9.5] (internal release)
+
+### Fixed
+- Fixed tamper RSOD not showing.  [#6165]
+
 ## [2.9.4] (19th November 2025)
 
 ### Added
@@ -1216,3 +1221,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6076]: https://github.com/trezor/trezor-firmware/pull/6076
 [#6096]: https://github.com/trezor/trezor-firmware/pull/6096
 [#6100]: https://github.com/trezor/trezor-firmware/pull/6100
+[#6165]: https://github.com/trezor/trezor-firmware/pull/6165

core/CHANGELOG.T3B1.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.9.5] (internal release)
+
+### Fixed
+- Fixed tamper RSOD not showing.  [#6165]
+
 ## [2.9.4] (19th November 2025)
 
 ### Added
@@ -1212,3 +1217,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6076]: https://github.com/trezor/trezor-firmware/pull/6076
 [#6096]: https://github.com/trezor/trezor-firmware/pull/6096
 [#6100]: https://github.com/trezor/trezor-firmware/pull/6100
+[#6165]: https://github.com/trezor/trezor-firmware/pull/6165

core/CHANGELOG.T3T1.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.9.5] (internal release)
+
+### Fixed
+- Fixed tamper RSOD not showing.  [#6165]
+
 ## [2.9.4] (19th November 2025)
 
 ### Added
@@ -1260,3 +1265,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6076]: https://github.com/trezor/trezor-firmware/pull/6076
 [#6096]: https://github.com/trezor/trezor-firmware/pull/6096
 [#6100]: https://github.com/trezor/trezor-firmware/pull/6100
+[#6165]: https://github.com/trezor/trezor-firmware/pull/6165

core/CHANGELOG.T3W1.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.9.5] (28th November 2025)
+
+### Fixed
+- Fixed tamper RSOD not showing.  [#6165]
+
 ## [2.9.4] (19th November 2025)
 
 ### Added
@@ -70,3 +75,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6076]: https://github.com/trezor/trezor-firmware/pull/6076
 [#6096]: https://github.com/trezor/trezor-firmware/pull/6096
 [#6100]: https://github.com/trezor/trezor-firmware/pull/6100
+[#6165]: https://github.com/trezor/trezor-firmware/pull/6165

core/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
+## [2.9.5] (28th November 2025)
+
+### Fixed
+- Fixed tamper RSOD not showing.  [#6165]
+
 ## [2.9.4] (19th November 2025)
 
 ### Added
@@ -1319,3 +1324,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 [#6076]: https://github.com/trezor/trezor-firmware/pull/6076
 [#6096]: https://github.com/trezor/trezor-firmware/pull/6096
 [#6100]: https://github.com/trezor/trezor-firmware/pull/6100
+[#6165]: https://github.com/trezor/trezor-firmware/pull/6165

core/SConscript.kernel

@@ -391,6 +391,7 @@ VENDORHEADER = f'embed/models/{TREZOR_MODEL}/vendorheader/vendorheader_{vendor}.
 
 if BOOTLOADER_DEVEL:
     if UNSAFE_FW:
+        # the `_DEV` binaries below are built using `make build_secmon BOOTLOADER_DEVEL=1`
         SECMON = f'embed/models/{TREZOR_MODEL}/secmon/secmon_DEV.bin'
         SECMON_API = f'embed/models/{TREZOR_MODEL}/secmon/secmon_api_DEV.o'
     else:

core/translations/signatures.json

@@ -5,6 +5,13 @@
     "commit": "4d80e657c5114d6914bfbd7502c5fe581fdb53e8"
   },
   "history": [
+    {
+      "signature": "0327225fee7a2696442468aa55c8aaf5514cd438ec277f471969e0e13062097f151c7fa4538c658f5a94f1440d49d00b9f387af4a9d5c30c7d60d7fbb32306e307",
+      "version": "2.9.5.0",
+      "merkle_root": "dc93c27f9b112e8ac015860616c6bd1900514f1dc5bfc76123261bc2c557d16f",
+      "datetime": "2025-11-27T09:36:31.832499+00:00",
+      "commit": "7d0ae5012dcbeecd038ef1bca6c6d5471ff94c5f"
+    },
     {
       "signature": "03bdb5f1adee3d2e35f805422fb17bc237c626831cf1ce463b75ae78120b40d53d44652176aceec7fdaed5291147e11aecfb782cf962c8f08c0358cf17929f8f00",
       "version": "2.9.4.0",