merge: sync fork master with upstream keepkey/master

Brings in the 16 upstream commits the fork lacked: the 7.14.1 release,
DylibTransport for in-process libkkemu testing, the EIP-1559 chunked-data
regression test, message-signing bindings and the Copilot review workflow.

Three conflicts, resolved on their merits:

  device-protocol  -> b22fd8530 (the freshly-synced FORK master), NOT
    upstream's d637b782. The two pins are diverged and upstream's is missing
    messages-hive.proto and messages-near.proto, which this fork's own tests
    import; b22fd8530 verifiably contains BOTH pins and all four protos.

  client.py        -> kept the fork file, dropped only the duplicated
    solana_sign_offchain_message. Taking upstream's file wholesale looked
    tempting and would have silently deleted five fork-only methods
    (hive_get_public_key/_keys, hive_sign_account_create/_update,
    hive_sign_tx). Verified after resolution: no method from EITHER side is
    missing, exactly one solana_sign_offchain_message remains, file parses.

  transport_dylib.py -> upstream's memset init, which replaces unpacking a
    FLASH_SIZE-element list as varargs. Same result, no argument-count risk.

Author: BitHighlander

.github/workflows/copilot-review.yml

@@ -0,0 +1,19 @@
+name: Request Copilot Review
+
+on:
+  pull_request:
+    types: [opened, reopened, ready_for_review, synchronize]
+
+jobs:
+  request-copilot-review:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    steps:
+      - name: Request Copilot review
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh api repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/requested_reviewers \
+            -X POST \
+            --field 'reviewers[]=Copilot'

device-protocol

@@ -1639,17 +1639,18 @@ def solana_sign_message(self, address_n, message, show_display=False):
         )
 
     @expect(solana_proto.SolanaOffchainMessageSignature)
-    def solana_sign_offchain_message(self, address_n, message, message_format,
+    def solana_sign_offchain_message(self, address_n, message, message_format=None,
                                      version=0, show_display=False):
-        return self.call(
-            solana_proto.SolanaSignOffchainMessage(
-                address_n=address_n,
-                version=version,
-                message_format=message_format,
-                message=message,
-                show_display=show_display,
-            )
-        )
+        kwargs = {
+            "address_n": address_n,
+            "version": version,
+            "message": message,
+            "show_display": show_display,
+        }
+        if message_format is not None:
+            kwargs["message_format"] = message_format
+
+        return self.call(solana_proto.SolanaSignOffchainMessage(**kwargs))
 
     # ── Tron ───────────────────────────────────────────────────
     @expect(tron_proto.TronAddress)

keepkeylib/client.py

@@ -96,7 +96,8 @@ def __init__(self, dylib_path):
 
         # Allocate flash as 0xFF (erased NOR state). Held by the singleton so
         # GC doesn't free it underneath the firmware's still-live mlock.
-        self.flash = (ctypes.c_uint8 * FLASH_SIZE)(*([0xFF] * FLASH_SIZE))
+        self.flash = (ctypes.c_uint8 * FLASH_SIZE)()
+        ctypes.memset(self.flash, 0xFF, FLASH_SIZE)
 
         rc = self.lib.kkemu_init(ctypes.cast(self.flash, ctypes.c_void_p), FLASH_SIZE)
         if rc != 0: