Elect new IC/GuestOS revision (commit 4a0dbb9)

Release Notes for release-2026-10-08_03-33-base (4a0dbb9251df6da0b65ab7a4d35e9a9871f58510) This release is based on changes since release-2026-10-02_03-31-base (2cdff28573522b2c9c5e96a4407b50281eb82b5c).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on GitHub.

Features:

• 9debdbf06 Core Protocol: use the monotonic consumed cycles by use case in metrics, deletion and install_code (#11776)
• 5291ec811 Core Protocol: certification version V30 with monotonic consumed cycles in subnet metrics (#11777)
• fca9b57bd Core Protocol(https_outcalls): only accept canonically encoded canister HTTP payloads (#11751)
• 9c1d7369d Core Protocol: Heap accessor (#11755)
• edc96f17a Core Protocol(outcalls): export the instructions executed by canister HTTP transforms (#11758)
• 5aa2e5bf1 Core Protocol: Shadow pull schedule and discrepancy metric (#11743)

Bugfixes:

• 1a9202b28 Core Protocol(orchestrator): make NNS Recovery on Failover Nodes retry-safe (#11768)
• 69df77008 Core Protocol: disable full Candid error messages when decoding ic0.cost_http_request_v2 params (#11773)
• a2e8120da Core Protocol: Reject reserved name (#11764)
• 2b4e31114 Core Protocol: Manifest for already deleted checkpoint (#11740)
• f8d59e519 Node(metrics-proxy): resolve upstream hosts via the system resolver (#11767)

Chores:

• 2d842c7eb Core Protocol: drop SubnetMetrics::consumed_cycles_by_use_case_monotonic (#11775)
• bb1dfc2d7 Core Protocol: drop the cycles metrics migrations (#11772)
• 414fd6ab2 Core Protocol: bump candid to 0.10.37 (#11774)
• 56ffd81ee Core Protocol: Remove old clippy issue (#11760)
• bf17c1c30 Core Protocol(dkg): remove summary's transcripts for remote subnets (4/4) (#11224)
• 905560f5c Core Protocol: rustc: 1.98.1 -> 1.99.0 (#11735)
• 9a3a386f3 Core Protocol: cargo clippy fixes to prepare for the rustc upgrade: 1.98.1 -> 1.99.0 (#11734)

Refactoring:

• e53d0331f Core Protocol: Split the single-subnet pull out of PoolRefillTask's sweep (#11732)
• effa4f63d Core Protocol: Clean up naming, comments and tests in the XNet payload builder (#11728)
• f7ea73a5b Core Protocol(outcalls): split the adapter channel out of the client constructor (#11745)

Tests:

• 37a383bc0 Core Protocol(consensus): cover secp256r1 ECDSA keys in system tests (#11762)

Documentation:

Full list of changes (including the ones that are not relevant to GuestOS) can be found on GitHub.

IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (sudo apt install curl), run:

# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/4a0dbb9251df6da0b65ab7a4d35e9a9871f58510/ci/scripts/repro-check | python3 - -c 4a0dbb9251df6da0b65ab7a4d35e9a9871f58510 --guestos

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing --hostos to the script above instead of --guestos, or the SetupOS by passing --setupos.