Bump speculos to 0.9.0

Author: overcat

.devcontainer/devcontainer.json

@@ -18,7 +18,7 @@
 				"ms-vscode.cpptools-extension-pack"
 			],
 			"settings": {
-        "terminal.integrated.defaultProfile.linux": "fish",
+				"terminal.integrated.defaultProfile.linux": "fish",
 				"terminal.integrated.shell.linux": {
 					"fish": {
 						"path": "/usr/bin/fish"

Dockerfile

@@ -1,6 +1,16 @@
 # You can find more information here: https://github.com/overcat/ledger-devcontainer
 FROM ubuntu:24.04
 
+ARG ARM_TOOLCHAIN_VERSION=10.3-2021.10
+ARG ARM_TOOLCHAIN_AMD64_MD5=2383e4eb4ea23f248d33adc70dc3227e
+ARG ARM_TOOLCHAIN_ARM64_MD5=3fe3d8bb693bd0a6e4615b6569443d0d
+ARG NANOS_SDK_VERSION=v2.1.0-19
+ARG NANOX_SDK_VERSION=v5.11.1
+ARG NANOSP_SDK_VERSION=v5.11.1
+ARG STAX_SDK_VERSION=v15.4.0
+ARG FLEX_SDK_VERSION=v18.3.0
+ARG SPECULOS_VERSION=0.9.0
+
 # Avoid warnings by switching to noninteractive
 ENV DEBIAN_FRONTEND=noninteractive
 
@@ -36,10 +46,6 @@ RUN apt-get update && apt-get upgrade -qy && apt-get install -qy \
     apt-get autoremove -y && \
     apt-get clean
 
-ARG ARM_TOOLCHAIN_VERSION=10.3-2021.10
-ARG ARM_TOOLCHAIN_AMD64_MD5=2383e4eb4ea23f248d33adc70dc3227e
-ARG ARM_TOOLCHAIN_ARM64_MD5=3fe3d8bb693bd0a6e4615b6569443d0d
-
 # ARM Embedded Toolchain
 # Integrity is checked using the MD5 checksum provided by ARM at https://developer.arm.com/tools-and-software/open-source-software/developer-tools/gnu-toolchain/gnu-rm/downloads
 RUN case $(uname -m) in \
@@ -64,36 +70,36 @@ ARG GIT_SERVER=https://github.com/LedgerHQ
 # Latest Nano S SDK
 # Will switch to the unified SDK for next OS release.
 ENV NANOS_SDK=/opt/nanos-secure-sdk
-RUN git clone --branch v2.1.0-19 --depth 1 "$GIT_SERVER/nanos-secure-sdk.git" "$NANOS_SDK"
+RUN git clone --branch ${NANOS_SDK_VERSION} --depth 1 "$GIT_SERVER/nanos-secure-sdk.git" "$NANOS_SDK"
 
 # Unified SDK
 ENV LEDGER_SECURE_SDK=/opt/ledger-secure-sdk
 RUN git clone "$GIT_SERVER/ledger-secure-sdk.git" "$LEDGER_SECURE_SDK"
 
 # Latest Nano X SDK (OS nanox_2.2.3 => based on API_LEVEL 5)
 ENV NANOX_SDK=/opt/nanox-secure-sdk
-RUN git -C "$LEDGER_SECURE_SDK" worktree add "$NANOX_SDK" v5.11.1
+RUN git -C "$LEDGER_SECURE_SDK" worktree add "$NANOX_SDK" ${NANOX_SDK_VERSION}
 RUN echo nanox > $NANOX_SDK/.target
 
 # Latest Nano S+ SDK (OS nanos+_1.1.1 => based on API_LEVEL 5)
 ENV NANOSP_SDK=/opt/nanosplus-secure-sdk
-RUN git -C "$LEDGER_SECURE_SDK" worktree add "$NANOSP_SDK" v5.11.1
+RUN git -C "$LEDGER_SECURE_SDK" worktree add "$NANOSP_SDK" ${NANOSP_SDK_VERSION}
 RUN echo nanos2 > $NANOSP_SDK/.target
 
 # Latest Stax SDK (OS stax_1.4.0-rc2 => based on API_LEVEL 15)
 ENV STAX_SDK=/opt/stax-secure-sdk
-RUN git -C "$LEDGER_SECURE_SDK" worktree add "$STAX_SDK" v15.4.0
+RUN git -C "$LEDGER_SECURE_SDK" worktree add "$STAX_SDK" ${STAX_SDK_VERSION}
 RUN echo stax > $STAX_SDK/.target
 
 # Latest Flex SDK (OS flex_0.2.0-rc2 => based on API_LEVEL 18)
 ENV FLEX_SDK=/opt/flex-secure-sdk
-RUN git -C "$LEDGER_SECURE_SDK" worktree add "$FLEX_SDK" v18.3.0
+RUN git -C "$LEDGER_SECURE_SDK" worktree add "$FLEX_SDK" ${FLEX_SDK_VERSION}
 RUN echo flex > $FLEX_SDK/.target
 
 # Default SDK
 ENV BOLOS_SDK=$NANOS_SDK
 
-RUN pip3 install --no-cache-dir --break-system-packages ledgerblue speculos==0.8.6
+RUN pip3 install --no-cache-dir --break-system-packages ledgerblue speculos==${SPECULOS_VERSION}
 
 # Switch back to dialog for any ad-hoc use of apt-get
 ENV DEBIAN_FRONTEND=