Repository navigation
Conversation
Bumps the actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b96794f...1c5b675) Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b96794f...1c5b675) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
…ions/actions-c83b7ed659 ci: bump the actions group with 2 updates
IsayIsee
marked this pull request as ready for review
September 28, 2026 03:58
Bumps the actions group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@1c5b675...2892aa5) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@1c5b675...2892aa5) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
…ions/actions-4b2c77c676
Bumps the python group in /tools with 1 update: [cryptography](https://github.com/pyca/cryptography). Updates `cryptography` from 50.0.1 to 50.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@50.0.1...50.0.2) --- updated-dependencies: - dependency-name: cryptography dependency-version: 50.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>
…ython-cddbe02dfc deps: bump cryptography from 50.0.1 to 50.0.2 in /tools in the python group
Bumps the actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
…ions/actions-5b90254856 ci: Bump the actions group with 3 updates
Waveshare RP2350-GEEK is the first target: a 1.14" 240x135 ST7789V2 panel over the shared PIO transport, driven by one physical button. The screen shows the ambient status, a trusted one-key confirm page naming the pending operation, and approve/decline feedback; a short press approves, a hold past 0.8 s declines. No touch pad means no on-device PIN entry, so `uv` stays unadvertised and the CCID pinpad stays off — PINs are host-side, as on a button-only key. `display-keys` is a cargo feature parallel to `display` (the two are `compile_error!`-exclusive) and shares only `display_panel`; `rsk-display`, `rsk-bip39`, `rsk-slip39` and the touch flow are not pulled in. The arbitration the new build waits on is host-tested: `rsk_device::presence::GestureWait` carries the same `spent` latch and scoped cancel as `ButtonWait`, with unit tests and Kani proofs beside it — which is what moves the `BugNoDropStaleCancelAtEntry` comutant's anchor onto the `wait` signature, the two entry preambles now being identical. The partial glass needs board keys: `display.madctl_scan`, `display.win_x` and `display.win_y` (all default 0, so every existing board is unchanged) plus the full ST7789V2 init register set and a GRAM blank before display-on, without which the 240x135 frame lands on the controller's larger GRAM and is clipped. The GEEK board file and the `firmware-display-keys` nix package (with the `-strong-pin` / `-always-uv` posture variants the default board has) join the release matrix, fourteen flavors become seventeen; `bcdDevice` moves to 0x09DB. The assurance matrix gains the four new columns as `gap` cells with settling questions, the pages the new code moved are regenerated, and the citations are re-locked.
`display_keys.rs`: the nested `if let` collapses into a let-chain, and the two divisibility tests (`% 2 == 0`, `% 3 == 0`) become `is_multiple_of`. These are what the gate's clippy reports; no other file changes.
`docs/releases.md`'s `display-keys` row sends a reader to `guides/display.md`, and the guide had nothing to say about the touchless build: the one-key flow lived only in the README and the CHANGELOG. - `guides/display.md`: a "The touchless variant" section — ambient status, the confirm page naming the pending operation, a short press against the ~0.8 s hold, PINs host-side — with the See-also line naming both features. - `hardware.md`: the board beside the touch one, photo and label. - `build.md`: the feature's own row and `waveshare-geek` in the `BOARD` list, which is what the See-also line now points at. The `display-keys` matrix row also stops advertising the no-host idle menu, which this PR does not build; the menu PR restores the mention (TheMaxMur#126). Docs only: no `bcdDevice` move, no wire surface.
After 30 s with no host configuring the device, the touchless build's STARTING wash becomes a read-only, single-button browse of the device's own metadata — per-applet counts and slot states, PIV slot policies, the OpenPGP and OATH listings, one row per passkey relying party, backup state and firmware identity — plus a SETTINGS page for the menu entry delay and the screen direction (the USB-C plug is reversible). The only flash it writes is its own record, and plugging into a host leaves the menu immediately. PIV's touch consent now names the slot it asks for (`9A Auth`, `Retired #1`, …) rather than one generic title, and both screen builds take the label from one function (`rsk_piv::info::slot_label`) instead of each spelling the same vocabulary. The menu's config is `EF_MENU_CONF` (`0xE031`), a record of its own: the touch build's `EF_DISPLAY` belongs to `rsk-display`, which this build does not pull in, and that crate's single writer carries only the flags it knows — a flip bit it has never heard of would be cleared by the first touch-build boot after a reflash. The codec lives in `rsk-ui` beside `settings_store`, with the decoding rules (a missing record, a shorter one from an older build, an index this build does not list) pinned by tests. `bcdDevice` moves to 0x09DC.
`docs/releases.md`'s `display-keys` row names the no-host idle menu again: the previous PR dropped the mention because it did not build the screen, and this one does. `guides/display.md`'s touchless section gains the paragraph the README and the CHANGELOG already carry — what the menu shows, `Taps step next, a double steps back, a hold opens a level`, the SETTINGS page's two knobs, and that the only flash it writes is its own record. Docs only: no `bcdDevice` move.
…ollow The branch stacks on TheMaxMur#123 and inherits its gate failure: `display` and `display-keys` both stole the panel pads with the same five tokens, so `site_keys()` had no sequence to tell them apart and fell back to a positional `~2`. The same `panel_pad` helper lands here, as an equivalent change rather than a rebase — neither branch needs the other to build. The menu's own bump sits on top of the parent's 0x09DC: - `device_release` 0x09DD, with both CHANGELOG entries: the helper as `refactor, no behaviour change`, the menu as the behaviour change it is — a new flavor to build, a new settings record, a new screen. - `assurance/platform.toml` (PLAT-UNSAFE-004's ninth cover, plus PLAT-UNSAFE-013), `docs/unsafe.md` (Runtime sites 24) and `docs/platform-assumptions.md`: the audit surface TheMaxMur#123 moves, over this tree's line numbers. - `formal/citations.lock` and `assurance/board/PLAT-TIMER-00{2,3}.toml`: the line numbers the menu code and the two bumps moved.
`AnyPin::steal` hands back `Peri<'static, AnyPin>`, so a helper declared `-> AnyPin` erased the token `Output::new` needs. Only the `display-keys` flavor compiles through the helper — the `display` build passes the same expression inline, where nothing erases it.
… build `AnyPin::steal` hands back `Peri<'static, AnyPin>`, so a helper declared `-> AnyPin` erased the token `Output::new` needs. Only the `display-keys` flavor compiles through the helper — the `display` build passes the same expression inline, where nothing erases it. A line that can reach the image owes the bump, so `bcdDevice` moves to 0x09DE.
The `display-keys` packages and the `waveshare-geek` board took the matrix from 31 configurations to 35 and its 1240 cells to 1400 (37 covered, 143 equivalent, 109 out-of-scope, 1111 gap). The eleven slices kept the old line, so `bundle_gate` read 88 stale transcriptions and the check job stopped on its row; the cases pinning the same numbers were stale with it, and the generated page carried the pre-board input counts. Gate, tests and docs only: `assurance/`, `scripts/` and `docs/` carry no line the image is built from, so no `bcdDevice` bump.
The `waveshare-geek` board and its three `display-keys` packages took the matrix from 19 flake packages to 22 and its boards from 6 to 7, and the touchless build added a ninth `AnyPin::steal` site, a thirteenth PLAT-UNSAFE row and a ninth `cargo doc` row. Four pins still held the pre-board counts, so `pytest (gate scripts)` read three failures — `matrix_gate.FLOOR_PACKAGES` at 19 against a derivation of 22, `len(steals)` at 8 against 9, and the `cargo doc` row count at 8 against 9 — and the check job stopped on its row. The floors sit AT the count by design (upstream's `583e58eb`), and this PR's own `docs/unsafe.md` already numbers the ninth steal — ×8 → ×9 — so the pins were stale, not the tree. The prose carrying the same counts follows them, in the same diff: the `matrix_gate` docstring and the matrix page's template sentence, that page regenerated with `--write`; `docs/formal.md`'s sentence naming packages, features and boards; `check.sh`'s comment on the matrix row; the two test comments quoting the old figures; and `PLAT-TOOLCHAIN-002`'s statement, discharge and header comment, which still counted twelve rows over thirty-one sites with eight of them GPIO steals — its page regenerated with `--write` as well. `12 against 19` stays where it is: that is the history of where the floor came from, not a count of this tree. Gate, tests and docs only: `scripts/`, `docs/` and `assurance/` carry no line the image is built from, so no `bcdDevice` bump.
IsayIsee
force-pushed
the
pr/keys-menu
branch
from
October 19, 2026 01:10
507fd72 to
2c3cd1d
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fork-internal CI rehearsal for TheMaxMur#126. Stacks on
pr/board-display-keys, so the diff againstmaincarries that branch too —this is the stacked PR as upstream sees it, not a second copy of it.
Do not merge.
mainhere must stay equal toupstream/main.Since the red CI: the branch inherits TheMaxMur#123's panel-steal failure, so the same
panel_padhelper lands here as an equivalent change rather than as a rebase —each branch builds without the other. On top of the parent's 0x09DC,
device_releaseis 0x09DD, with two CHANGELOG entries: the helper asrefactor, no behaviour change, the menu as the behaviour change it is. Theaudit surface (
platform.toml,docs/unsafe.md, the generateddocs/platform-assumptions.md) and the line-numbered citations(
formal/citations.lock,PLAT-TIMER-00{2,3}.toml) follow this tree's lines.Since the second red CI: the same
panel_padreturn-type defect as #2, anddevice_release0x09DD -> 0x09DE — a line that can reach the image owes thebump, and this tree's compile fix is its own step on top of the parent's.