ICP Proposal Forum

Proposal ID: 138361

Release Notes for [release-2025-09-04\_03-11-base](https://github.com/dfinity/ic/tree/release-2025-09-04_03-11-base) (`9152ba15ab6cc3c12eb407e13f8ee483a1d5723c`) ================================================================================================================================================================= This release is based on changes since [release-2025-08-28\_03-17-base](https://dashboard.internetcomputer.org/release/84a268e93a909a6827d76ad794411b161c839a12) (`84a268e93a909a6827d76ad794411b161c839a12`). Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format. To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2025-08-28_03-17-base...release-2025-09-04_03-11-base). Features: --------- * [`d936be769`](https://github.com/dfinity/ic/commit/d936be769) Consensus,Execution,Interface(XC): enable Dogecoin for staging canisters ([#6563](https://github.com/dfinity/ic/pull/6563)) * [`343c6fc03`](https://github.com/dfinity/ic/commit/343c6fc03) Consensus,Interface: Start the creation of new pre-signatures for the emptiest stash ([#6477](https://github.com/dfinity/ic/pull/6477)) * [`69b755062`](https://github.com/dfinity/ic/commit/69b755062) Consensus,Interface(btc-adapter): remove dependency on bitcoincore-rpc ([#6412](https://github.com/dfinity/ic/pull/6412)) * [`44b1fc97b`](https://github.com/dfinity/ic/commit/44b1fc97b) Consensus,Interface: Start IDkgBlockReader above certified height during payload creation & validation ([#6308](https://github.com/dfinity/ic/pull/6308)) * [`464301da9`](https://github.com/dfinity/ic/commit/464301da9) Execution,Interface: Purge pre-signatures that exceed the maximum stash size ([#6504](https://github.com/dfinity/ic/pull/6504)) * [`039a1acf9`](https://github.com/dfinity/ic/commit/039a1acf9) Interface: adding ic-admin calls to swap node in subnet directly ([#6550](https://github.com/dfinity/ic/pull/6550)) * [`28de7a00e`](https://github.com/dfinity/ic/commit/28de7a00e) Interface(ICRC-Archive): Ensure upgrade u64 <-> u256 fails ([#6546](https://github.com/dfinity/ic/pull/6546)) * [`4f9e7dcb8`](https://github.com/dfinity/ic/commit/4f9e7dcb8) Interface: adding the data model and canister method for node swapping ([#6487](https://github.com/dfinity/ic/pull/6487)) * [`e3857ed56`](https://github.com/dfinity/ic/commit/e3857ed56) Interface(ICRC-Ledger): Ensure upgrade u64 <-> u256 fails ([#6486](https://github.com/dfinity/ic/pull/6486)) * [`4b0d3410f`](https://github.com/dfinity/ic/commit/4b0d3410f) Interface,Message Routing: Reject requests coming from seemly wrong subnet ([#6480](https://github.com/dfinity/ic/pull/6480)) * [`55fb2f974`](https://github.com/dfinity/ic/commit/55fb2f974) Interface,Message Routing: allow requests to arrive to migrated-away canister ([#6430](https://github.com/dfinity/ic/pull/6430)) * [`c4ab3bf04`](https://github.com/dfinity/ic/commit/c4ab3bf04) Interface,Message Routing: Soft limit for merge size ([#6475](https://github.com/dfinity/ic/pull/6475)) * [`6ab18899e`](https://github.com/dfinity/ic/commit/6ab18899e) Interface,Node: Attestation crate ([#6467](https://github.com/dfinity/ic/pull/6467)) * [`bbf3a56ce`](https://github.com/dfinity/ic/commit/bbf3a56ce) Interface,Node(node): generate-ic-config follow ups ([#6471](https://github.com/dfinity/ic/pull/6471)) Bugfixes: --------- * [`7e6022cd1`](https://github.com/dfinity/ic/commit/7e6022cd1) Consensus,Interface: Use correct registry version for `ChainKeyConfig` in IDKG data payload builder ([#6565](https://github.com/dfinity/ic/pull/6565)) * [`e35448e99`](https://github.com/dfinity/ic/commit/e35448e99) Consensus,Interface(orchestrator): Introduce timeout with backoff when fetching CUPs ([#6219](https://github.com/dfinity/ic/pull/6219)) Performance improvements: ------------------------- * [`0851642d9`](https://github.com/dfinity/ic/commit/0851642d9) Consensus,Interface(idkg): reduce the number of support share validations ([#6526](https://github.com/dfinity/ic/pull/6526)) Chores: ------- * [`9e79433b4`](https://github.com/dfinity/ic/commit/9e79433b4) Consensus,Interface: Add a topology version metric and use it in some tests adding nodes ([#6574](https://github.com/dfinity/ic/pull/6574)) * [`c6fc12aec`](https://github.com/dfinity/ic/commit/c6fc12aec) Consensus,Interface: open FW for SOCKS proxy port for system or app subnet nodes ([#6511](https://github.com/dfinity/ic/pull/6511)) * [`324a36643`](https://github.com/dfinity/ic/commit/324a36643) Consensus,Interface(canister\_migration): Rename some structs/constants from *CALL\_V3* to *SYNC\_CALL* ([#6492](https://github.com/dfinity/ic/pull/6492)) * [`4c5147ff0`](https://github.com/dfinity/ic/commit/4c5147ff0) Crypto: use ic-principal instead of full candid ([#6352](https://github.com/dfinity/ic/pull/6352)) * [`c0f4416b7`](https://github.com/dfinity/ic/commit/c0f4416b7) Crypto,Interface,Message Routing: Add exclusive filtering to MixedHashTree ([#6566](https://github.com/dfinity/ic/pull/6566)) * [`31e3a6e90`](https://github.com/dfinity/ic/commit/31e3a6e90) Execution,Interface: Inline execution dependencies ([#6579](https://github.com/dfinity/ic/pull/6579)) * [`d26ef1fe5`](https://github.com/dfinity/ic/commit/d26ef1fe5) Execution,Interface(fuzzing): Make sandbox binary identifiable via a custom section ([#6568](https://github.com/dfinity/ic/pull/6568)) * [`04affbae7`](https://github.com/dfinity/ic/commit/04affbae7) Execution,Interface: Use `HeapBytes` in caches ([#6445](https://github.com/dfinity/ic/pull/6445)) * [`c6b33304a`](https://github.com/dfinity/ic/commit/c6b33304a) Interface: use PocketIcBuilder::with\_all\_icp\_features in sns-testing ([#6474](https://github.com/dfinity/ic/pull/6474)) * [`a24b7d484`](https://github.com/dfinity/ic/commit/a24b7d484) Interface: remove drun from IC repo ([#6535](https://github.com/dfinity/ic/pull/6535)) * [`00c309a20`](https://github.com/dfinity/ic/commit/00c309a20) Interface: Stop preparing routing table in the old format outside of production ([#6059](https://github.com/dfinity/ic/pull/6059)) * [`4283ad61c`](https://github.com/dfinity/ic/commit/4283ad61c) Interface,Message Routing: state sync cache should not be updated by another one in Prep phase ([#6580](https://github.com/dfinity/ic/pull/6580)) * [`8d3a745a8`](https://github.com/dfinity/ic/commit/8d3a745a8) Interface,Message Routing: Remove Certification Versions below V19 ([#6427](https://github.com/dfinity/ic/pull/6427)) * [`f0bfdd2c8`](https://github.com/dfinity/ic/commit/f0bfdd2c8) Interface,Node: Factor out VSockClient trait ([#6523](https://github.com/dfinity/ic/pull/6523)) * [`be7421c09`](https://github.com/dfinity/ic/commit/be7421c09) Owners: bump tracing-subscriber to 0.3.20 ([#6585](https://github.com/dfinity/ic/pull/6585)) * [`29441688a`](https://github.com/dfinity/ic/commit/29441688a) Node: Update Base Image Refs [2025-08-28-0805] ([#6503](https://github.com/dfinity/ic/pull/6503)) Refactoring: ------------ * [`ac630a3fe`](https://github.com/dfinity/ic/commit/ac630a3fe) Interface,Node: Move fetching SEV certs higher up in the call stack ([#6522](https://github.com/dfinity/ic/pull/6522)) Tests: ------ * [`504f6795a`](https://github.com/dfinity/ic/commit/504f6795a) Interface,Node(doge): dogecoin adapter system tests ([#6414](https://github.com/dfinity/ic/pull/6414)) --------------------------------------- Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/c6844a8e4bc8bed57bc8fe9a4692234b3a9872bf/replica-releases/9152ba15ab6cc3c12eb407e13f8ee483a1d5723c.md). # IC-OS Verification To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run: ``` # From https://github.com/dfinity/ic#verifying-releases curl -fsSL https://raw.githubusercontent.com/dfinity/ic/master/ci/tools/repro-check | python3 - -c 9152ba15ab6cc3c12eb407e13f8ee483a1d5723c --guestos ``` The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal. While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.