Upgrade the Registry Canister to Commit c748b8e

Upgrade the Registry Canister to Commit c748b8e

__Proposer__: daniel.wong at dfinity.org

__Source code__: [c748b8e76b90ceef329c055e6f7b38a00aae8745][new-commit]

[new-commit]: https://github.com/dfinity/ic/tree/c748b8e76b90ceef329c055e6f7b38a00aae8745

Features & Fixes

Added

• Invariant requiring that SEV-enabled subnets may only run a GuestOS version that has

guest_launch_measurements.

Changed

• deploy_guestos_to_all_subnet_nodes now accepts a blank replica_version_id

for Cloud Engines, provided a StandardEngineReplicaVersionRecord exists. This is how a Cloud Engine that pins a version goes back to following the standard engine version. Previously, only engine creation could leave replica_version_id blank, because this endpoint required the version to be elected, and a blank version never is.

New Commits

$ git log --format="%C(auto) %h %s" 8aa4680e378f3248e7e7b9b8237915aded999bd9..c748b8e76b90ceef329c055e6f7b38a00aae8745 --  ./rs/registry/canister
 c748b8e76b feat(registry): Allow blanking an existing Cloud Engine's replica_version_id. (#11172)
 c818497b5c test(engines): System test for standard engine replica version. (#10939)
 79c01052b5 chore: Remove migration and remnants of blessed versions (#10941)
 eb2d4df17e feat: require launch measurements for SEV-enabled subnets (#11057)
 a784fcee8d chore(nervous-system): Update changelog for release 2026-08-14 (#11150)

Current Version

__Current git hash__: 8aa4680e378f3248e7e7b9b8237915aded999bd9

__Current wasm hash__: 42158099a88bf49109f342e44cbe19cbb70c43b09b45a2957dab6093f1db8658

Verification

See the general instructions on [how to verify] proposals like this. A "quick start" guide is provided here.

[how to verify]: https://github.com/dfinity/ic/tree/c748b8e76b90ceef329c055e6f7b38a00aae8745/rs/nervous_system/docs/proposal_verification.md

WASM Verification

See ["Building the code"][prereqs] for prerequisites.

[prereqs]: https://github.com/dfinity/ic/tree/c748b8e76b90ceef329c055e6f7b38a00aae8745/README.adoc#building-the-code

# 1. Get a copy of the code.
git clone git@github.com:dfinity/ic.git
cd ic
# Or, if you already have a copy of the ic repo,
git fetch
git checkout c748b8e76b90ceef329c055e6f7b38a00aae8745

# 2. Build canisters.
./ci/container/build-ic.sh -c

# 3. Fingerprint the result.
sha256sum ./artifacts/canisters/registry-canister.wasm.gz

This should match wasm_module_hash field of this proposal.