DFINITY Foundation

Synapse.vote (original)

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8yeargangDAO

Isaac Valadez

Krzysztof Żelazko

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Synapse.vote (NEW)

Taggr Network

CodeGov

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

Cosmicrafts

Arthur’s Neuron (used to be cycle_dao)

Inactive (Request Removal) - The Fools' Court

$STACK

Always Rejects

John Wiegley

Release Notes for [release-2025-10-02\_03-13-base](https://github.com/dfinity/ic/tree/release-2025-10-02_03-13-base) (`45657852c1eca6728ff313808db29b47c862ad13`)
=================================================================================================================================================================

This release is based on changes since [release-2025-09-25\_09-52-base](https://dashboard.internetcomputer.org/release/206b61a8616bc93d36d6a014e5cc8edf1ba256ae) (`206b61a8616bc93d36d6a014e5cc8edf1ba256ae`).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2025-09-25_09-52-base...release-2025-10-02_03-13-base).

Features:
---------

* [`9a3a90b99`](https://github.com/dfinity/ic/commit/9a3a90b99) Execution,Interface: Add a canister\_metadata management canister method ([#6725](https://github.com/dfinity/ic/pull/6725))
* [`d90636e41`](https://github.com/dfinity/ic/commit/d90636e41) Execution,Interface(canister\_logging): add filtering support for fetching logs ([#6707](https://github.com/dfinity/ic/pull/6707))
* [`94e125aa9`](https://github.com/dfinity/ic/commit/94e125aa9) Execution,Interface: Allow loading a snapshot onto another canister ([#6592](https://github.com/dfinity/ic/pull/6592))
* [`45657852c`](https://github.com/dfinity/ic/commit/45657852c) Interface(nervous\_system): Create rate-limit library ([#6928](https://github.com/dfinity/ic/pull/6928))
* [`9f6374ac1`](https://github.com/dfinity/ic/commit/9f6374ac1) Interface: Introduce `Refund` and `StreamMessage` ([#6889](https://github.com/dfinity/ic/pull/6889))
* [`e284bc85c`](https://github.com/dfinity/ic/commit/e284bc85c) Interface,Message Routing: Handle `Refund` in streams ([#6957](https://github.com/dfinity/ic/pull/6957))
* [`6a5576d4c`](https://github.com/dfinity/ic/commit/6a5576d4c) Interface,Node: New remote attestation endpoint ([#6924](https://github.com/dfinity/ic/pull/6924))
* [`9ada9be97`](https://github.com/dfinity/ic/commit/9ada9be97) Interface,Node: Implement SEV disk encryption key exchange ([#6576](https://github.com/dfinity/ic/pull/6576))
* [`5c0e9ad17`](https://github.com/dfinity/ic/commit/5c0e9ad17) Node: enable generate-ic-config rust path ([#6964](https://github.com/dfinity/ic/pull/6964))
* [`edf5d109f`](https://github.com/dfinity/ic/commit/edf5d109f) Node: Add cap to max data size ([#6950](https://github.com/dfinity/ic/pull/6950))

Bugfixes:
---------

* [`03b997c92`](https://github.com/dfinity/ic/commit/03b997c92) Consensus,Interface(ic-recovery): `ic-recovery` fixes and improvements ([#6893](https://github.com/dfinity/ic/pull/6893))
* [`44284ef9f`](https://github.com/dfinity/ic/commit/44284ef9f) Execution,Interface(canister\_logging): unify max log message for debug\_print and trap ([#6921](https://github.com/dfinity/ic/pull/6921))
* [`8152ec6f5`](https://github.com/dfinity/ic/commit/8152ec6f5) Interface,Node: revert base image upgrades 5833499 and 49faad7 ([#7025](https://github.com/dfinity/ic/pull/7025))

Performance improvements:
-------------------------

* [`14f6a769d`](https://github.com/dfinity/ic/commit/14f6a769d) Consensus,Interface(idkg): Use multi-threading in `validate_transcript_refs` ([#6975](https://github.com/dfinity/ic/pull/6975))
* [`70b3d80e6`](https://github.com/dfinity/ic/commit/70b3d80e6) Consensus,Interface(dogecoin): benchmark adapter for adding Dogecoin block headers ([#6740](https://github.com/dfinity/ic/pull/6740))
* [`34881d2c9`](https://github.com/dfinity/ic/commit/34881d2c9) Consensus,Interface(idkg): Use multi-threading in `send_dealings` ([#6842](https://github.com/dfinity/ic/pull/6842))
* [`2aed1a248`](https://github.com/dfinity/ic/commit/2aed1a248) Crypto,Interface(crypto): send only raw internal dealing in vault's idkg\_load\_transcript ([#6939](https://github.com/dfinity/ic/pull/6939))
* [`0443ce387`](https://github.com/dfinity/ic/commit/0443ce387) Crypto,Interface(crypto): adapt vault message size histrogram buckets ([#6916](https://github.com/dfinity/ic/pull/6916))

Chores:
-------

* [`2c70a74da`](https://github.com/dfinity/ic/commit/2c70a74da) Consensus,Interface: Make IDKG client components thread safe ([#6837](https://github.com/dfinity/ic/pull/6837))
* [`cf98769d4`](https://github.com/dfinity/ic/commit/cf98769d4) Crypto,Interface(crypto): include underlying error in DecryptError::InvalidChunk ([#6944](https://github.com/dfinity/ic/pull/6944))
* [`b1e381ff6`](https://github.com/dfinity/ic/commit/b1e381ff6) Execution,Interface: port further Haskell tests to Rust ([#6977](https://github.com/dfinity/ic/pull/6977))
* [`d3a5cab01`](https://github.com/dfinity/ic/commit/d3a5cab01) Execution,Interface,Message Routing(canister\_logging): remove unused append\_log method ([#7014](https://github.com/dfinity/ic/pull/7014))
* [`d161192b1`](https://github.com/dfinity/ic/commit/d161192b1) Interface(ICP\_Ledger): Remove ICP ledger notify-method feature ([#6717](https://github.com/dfinity/ic/pull/6717))
* [`264b270da`](https://github.com/dfinity/ic/commit/264b270da) Interface,Message Routing: Observe file sizes and check chunk duplication ([#6956](https://github.com/dfinity/ic/pull/6956))
* [`29b754a33`](https://github.com/dfinity/ic/commit/29b754a33) Interface,Message Routing: Minor code improvements related to state sync ([#6969](https://github.com/dfinity/ic/pull/6969))
* [`78a611082`](https://github.com/dfinity/ic/commit/78a611082) Interface,Node: Add prefix to named temp files in production ([#6985](https://github.com/dfinity/ic/pull/6985))
* [`ab140fa07`](https://github.com/dfinity/ic/commit/ab140fa07) Interface,Node: set guestOS config version to tool version ([#6866](https://github.com/dfinity/ic/pull/6866))
* [`604ebf828`](https://github.com/dfinity/ic/commit/604ebf828) Interface,Node(node): Add template engine for ic.json.template ([#6923](https://github.com/dfinity/ic/pull/6923))
* [`5833499af`](https://github.com/dfinity/ic/commit/5833499af) Node: Update Base Image Refs [2025-09-25-2125] ([#6952](https://github.com/dfinity/ic/pull/6952))
* [`49faad717`](https://github.com/dfinity/ic/commit/49faad717) Node: Update Base Image Refs [2025-09-25-0804] ([#6929](https://github.com/dfinity/ic/pull/6929))

Refactoring:
------------

* [`d08f6db78`](https://github.com/dfinity/ic/commit/d08f6db78) Consensus,Interface(consensus): move `cup_utils` to its own crate ([#6959](https://github.com/dfinity/ic/pull/6959))
* [`ea19d130a`](https://github.com/dfinity/ic/commit/ea19d130a) Execution,Interface: Encapsulate CyclesAccountManager as an execution service ([#6908](https://github.com/dfinity/ic/pull/6908))
* [`0090e3808`](https://github.com/dfinity/ic/commit/0090e3808) Interface,Node(node): remove generate\_testnet\_config.rs ([#6936](https://github.com/dfinity/ic/pull/6936))

---------------------------------------
Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/20b9100a1931cc389dee76bdfdcf18c4d34c5964/replica-releases/45657852c1eca6728ff313808db29b47c862ad13.md).

# IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run:

```
# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/master/ci/tools/repro-check | python3 - -c 45657852c1eca6728ff313808db29b47c862ad13 --guestos
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.


Elect new IC/GuestOS revision (commit 4565785)