Elect new IC/GuestOS revision (commit 5c2c0c5)

Release Notes for release-2026-11-13_03-18-base (5c2c0c5bc886df2c297c9340e9586bdfd122c323) This release is based on changes since release-2026-11-06_03-19-base (620b81c4bf6c59aa1065fe7412afcaf49e51503e).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on GitHub.

Features:

• 931cce58e Core Protocol: record hash of install_code argument in canister history (#12077)
• b701afdf2 Core Protocol(recovery): halt both subnets of a merge at their next CUP in the subnet merging tool (#11963)
• 3c28dbf2f Node(guestos): export memory reclaim counters and buddyinfo from node_exporter (#12027)

Bugfixes:

• 22aa8c9cc Core Protocol: deflake //rs/embedders:embedders_test (#12062)
• 517c0972c Core Protocol: make a failed PageMap merge fatal (#12055)
• 91b539f7c Core Protocol: validate sender_canister_version of take_canister_snapshot (#12049)
• df6fef691 Core Protocol(execution): invalidate query cache entries on balance change after ic0.canister_liquid_cycle_balance128 (#12025)
• 7c116ca38 Core Protocol(execution): improve management settings errors (#12028)
• 7035cbe42 Core Protocol(leb128): better error handling (#12009)

Performance improvements:

• 052ee66b7 Core Protocol: don't fsync each new Wasm binary at checkpoints (#12073)
• 5ea9d4b34 Core Protocol: balance parallel_map across threads; flush and merge largest PageMaps first (#12059)

Chores:

• 869aa00a6 Core Protocol: Extend SelfValidating payload builder (#12040)
• 5c2c0c5bc Node: Update Base Image Refs [2026-11-12-0804] (#12074)
• d4a79462e Node(bazel): opt out of rules_python's implicit __init__.py creation (#12042)

Refactoring:

• b870d24c8 Core Protocol: Extend ID of stripped proposals with stripped message IDs (#12061)
• d5e0978e4 Core Protocol: move collection of canister-to-canister metrics to execution (#12037)
• 4cb8e839b Core Protocol: cleanup P2P retry loop (#12039)
• 9c48f4140 Core Protocol(p2p): avoid unnecessary nested locks when serving stripped artifacts (#11974)

Tests:

• 9147ff143 Core Protocol(execution): regression tests for already deployed execution environment fixes (#12026)

Full list of changes (including the ones that are not relevant to GuestOS) can be found on GitHub.

IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (sudo apt install curl), run:

# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/5c2c0c5bc886df2c297c9340e9586bdfd122c323/ci/scripts/repro-check | python3 - -c 5c2c0c5bc886df2c297c9340e9586bdfd122c323 --guestos

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing --hostos to the script above instead of --guestos, or the SetupOS by passing --setupos.