Elect new IC/GuestOS revision (commit 83f29e0)

Release Notes for release-2026-10-30_12-16-base (83f29e0803496ba6aaea3d6b43f6c6bebea12dd9) This release is based on changes since release-2026-10-22_03-29-base (5e8370e0a84ffb783d6a9d77e0d3e90fa3914cfe).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on GitHub.

Features:

• e17c7975e Core Protocol: Pull stream slices on adverts, not every round (#11951)
• 3098a3b87 Core Protocol(canister metrics): introduce canister-to-canister communication metrics (#9906)
• f83a7646c Core Protocol: validate calls in should_accept_ingress_message via validate_replicated_call (#11914)
• 14ea6b989 Core Protocol: bump current certification version to V30 and report the monotonic consumed cycles in subnet_metrics (#11912)
• 0c7422c04 Core Protocol: mandatory witnesses in certifications (#11906)
• e80ce4118 Core Protocol: Make replica_version_id on ReplicaVersionRecord mandatory (#10943)

Bugfixes:

• 409eda66a Core Protocol: use saturating subtraction when deducting instructions from round limits (#11948)
• 61548914b Core Protocol(execution): clean up after a failed re-execution of an aborted install_code (#11918)
• 0e5131424 Core Protocol(execution): persist canister logs if applying the execution's state changes fails (#11849)
• d26648f47 Node(ic-os): select SELinux with lsm= and update base image refs (#11983)
• 4f9e663a4 Node(GUESTOS BOOT FAILURE): rescan volume after creating it (#11958)
• bc5c5adf8 Node(guestos): start the Dogecoin adapters after setup-permissions (#11960)

Performance improvements:

• d973d1d96 Core Protocol(pools): optimize HeightIndexedInstants<T> storage- and time-wise (#11931)
• d96942843 Core Protocol: Only verify NothingNew adverts that advance the recorded header (#11877)

Chores:

• e80eca425 Core Protocol: Improve out of memory error text (#11950)
• e0eac7851 Core Protocol: rustc: 1.99.0 -> 1.99.1 (#11935)
• 592d14c0a Core Protocol: bump ic-management-canister-types to 0.11.0 (#11909)
• 603420a2d Core Protocol(metrics): generic unmatched label for non-registered routes (#11923)
• 4c972d422 Core Protocol: relax metrics header parsing (#11922)
• 32cfd0506 Core Protocol: remove redundant lifetime annotations (#11903)
• 7c7a7e8f6 Node: Replace infogetty cpp with a Rust version (#11881)
• 9a6741e41 Node: Remove update-config component (#11926)
• c13ffc3fb Node: Update Base Image Refs [2026-10-24-0132] (#11939)
• 3e645182a Node: remove the NTP fallback from chrony and require NTS sources (#11925)
• 58bf84781 Node: Update Base Image Refs [2026-10-22-0809] (#11915)

Refactoring:

• 39c32eaf0 Core Protocol(p2p): split InitialBroadcastSource out of ValidatedPoolReader (#11973)
• c8f077122 Core Protocol: Move the pull schedule into PullTask (#11893)
• c79c481d4 Core Protocol: Move pool population and adverts into an exchange module (#11890)
• d78cad7dc Core Protocol: Move pull_indices(); rename PoolRefillTask (#11889)
• 94a5ab9fe Core Protocol(dkg): always pass remote transcripts in data payloads (#11920)
• 826b8785b Core Protocol: unify empty block creation and validation (#11917)
• 4920b2657 Node: name the SEV-SNP launch measurement length (#11135)

Tests:

Full list of changes (including the ones that are not relevant to GuestOS) can be found on GitHub.

IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (sudo apt install curl), run:

# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/83f29e0803496ba6aaea3d6b43f6c6bebea12dd9/ci/scripts/repro-check | python3 - -c 83f29e0803496ba6aaea3d6b43f6c6bebea12dd9 --guestos

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing --hostos to the script above instead of --guestos, or the SetupOS by passing --setupos.