DFINITY Foundation

Wenzel

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8YearGangDAO

Isaac Valadez

Krzysztof Żelazko

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Synapse (see neuron merger plan with the Wenzel known neuron)

Taggr Network

CodeGov.org (see neuron merger plan with the Wenzel known neuron)

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

cyberowl

Dexter Caff/acc

# Upgrade the Registry Canister to Commit 1b25ff7

__Proposer__: daniel.wong at dfinity.org

__Source code__: [1b25ff7b66627df8413677f55919010c4d6719d0][new-commit]

[new-commit]: https://github.com/dfinity/ic/tree/1b25ff7b66627df8413677f55919010c4d6719d0


## Features & Fixes

###  Changed

* Promoted the check for empty SEV measurements in replica versions from a check on proposals, to an invariant of the registry.

* When performing subnet creation, subnet update, or subnet recovery, it is now mandatory to omit the `KeyConfig`'s `pre_signatures_to_create_in_advance` field for keys that do not have pre-signatures. Currently only vetKD keys do not have pre-signatures (unlike Ecdsa/Schnorr keys).

  This is a *breaking* change because setting the `pre_signatures_to_create_in_advance` field for vetKD keys is no longer allowed. However, only governance proposals are affected, which are typically constructed via ic-admin, which was adapted to behave correctly.

###  Fixed

* Migrate vetKD chain keys in specific subnets: change the chain key config's `pre_signatures_to_create_in_advance` field from `Some(0)` to `None` to align with the correct representation for keys that do not have pre-signatures


## New Commits

```
$ git log --format="%C(auto) %h %s" b43f2bac9f93a2b927419d647c8ac56aadd7db54..1b25ff7b66627df8413677f55919010c4d6719d0 --  ./rs/registry/canister
 192a55fb80 feat(registry): CRP-2618 migrate pre_signatures_to_create_in_advance field for vetKD keys (#8247)
 e83e0ab592 feat(crypto): CRP-2618 require omitting pre_signature_to_create_in_advance for vetKD (#7981)
 91e692c943 chore: Move empty measurement check to invariant (#8149)
 c9d8dfda86 docs(governance): Updated changelogs for Governance backend canisters 2026-01-09. (#8295)
 9bd974ae9f chore: mark test registry canister as testonly (#8291)
```


## Current Version

__Current git hash__: b43f2bac9f93a2b927419d647c8ac56aadd7db54

__Current wasm hash__: 9a8a90c6bbfd1c4a411f8347ffba5a0b3b33441e20809701916fa93bca186251


## Verification

See the general instructions on [how to verify] proposals like this. A "quick
start" guide is provided here.

[how to verify]: https://github.com/dfinity/ic/tree/1b25ff7b66627df8413677f55919010c4d6719d0/rs/nervous_system/docs/proposal_verification.md


### WASM Verification

See ["Building the code"][prereqs] for prerequisites.

[prereqs]: https://github.com/dfinity/ic/tree/1b25ff7b66627df8413677f55919010c4d6719d0/README.adoc#building-the-code

```
# 1. Get a copy of the code.
git clone git@github.com:dfinity/ic.git
cd ic
# Or, if you already have a copy of the ic repo,
git fetch
git checkout 1b25ff7b66627df8413677f55919010c4d6719d0

# 2. Build canisters.
./ci/container/build-ic.sh -c

# 3. Fingerprint the result.
sha256sum ./artifacts/canisters/registry-canister.wasm.gz
```

This should match `wasm_module_hash` field of this proposal.


Upgrade the Registry Canister to Commit 1b25ff7