Upgrade NNS Canister: qoctq-giaaa-aaaaa-aaaea-cai to wasm with hash: b83bc43862b91874ba06cb071e7b8cec33d7c782b814a0eca7f032d3192d5447

Upgrade frontend NNS Dapp canister to commit d5a09886c5698999e0508a684a87fe0bdf701fc7

Wasm sha256 hash: b83bc43862b91874ba06cb071e7b8cec33d7c782b814a0eca7f032d3192d5447 (https://github.com/dfinity/nns-dapp/actions/runs/40577621041)

Change Log

Added

• Make the NNS dapp discoverable by AI agents, also through ICP MCP.

Changed

• Connect to the Ledger device through the Ledger Device Management Kit. It

replaces the old transport that Ledger deprecated.

Commit Log

+ bash -xc "git log --format='%C(auto) %h %s' 906b1cfb3..d5a09886c"
 d5a09886c Update changelog after release (#8126)
 8f3e6fa38 feat(backend): make the nns-dapp discoverable by AI agents (#8113)
 1bbfbc39d fix(release): verify wasm hash against the CI build log (#8020)
 7cf78a13b bot: Update SNS Aggregator Response (#8114)
 40506e15c fix(scripts): reject non-numeric ledger canister values before arithmetic (#8035)
 40e6bf0ca ci(workflows): add least-privilege permissions to nightly.yaml and tag.yaml (#8055)
 5da3f8815 fix(ci): pin snsdemo to a commit hash instead of a mutable tag (#8019)
 f444904c1 feat(ledger): connect to the Ledger device through the Device Management Kit (#8116)
 013a85b38 chore(deps): bump candid from 0.10.38 to 0.10.39 (#8120)
 0e01967db bot: Update IC Cargo Dependencies to release-2026-10-22_03-29-base (#8118)

Wasm Verification

To build the wasm module yourself and verify its hash, run the following commands from the root of the nns-dapp repo:

git fetch  # to ensure you have the latest changes.
git checkout "d5a09886c5698999e0508a684a87fe0bdf701fc7"
git merge-base --is-ancestor HEAD origin/main && echo "OK" || echo "Commit is not on main branch!"
./scripts/docker-build
sha256sum nns-dapp.wasm.gz

You may also want to verify the canister arguments. In the proposal they are binary, which is not very readable. Docker provides both binary and text formats and you can verify that the text format corresponds to the binary arg_hash field in the proposal.

cat nns-dapp-arg-mainnet.did
didc encode "$(cat nns-dapp-arg-mainnet.did)" | xxd -r -p | sha256sum