DFINITY Foundation

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8YearGangDAO

Isaac Valadez

Krzysztof

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Taggr Network

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

cyberowl

Dexter Caff/acc

JMVR

Smacker

CodeGov.org (see neuron merger plan with the Wenzel known neuron)

Wenzel

Synapse (see neuron merger plan with the Wenzel known neuron)

Change the set of elected GuestOS versions.

The version to elect (identified by the hash of the installation image) is added to the registry. Besides creating a record for that version, the proposal also appends that version to the list of elected versions that can be installed on nodes of a subnet.

Only elected GuestOS versions can be deployed.

Release Notes for [release-2026-03-26_04-51-base](https://github.com/dfinity/ic/tree/release-2026-03-26_04-51-base) (`17d483c60a09b393ad82a2091b68a242ac69c72d`)
This release is based on changes since [release-2026-03-19_04-43-base](https://dashboard.internetcomputer.org/release/d17cf0bcd330e94f868cc7d19d0ac860cbe64198) (`d17cf0bcd330e94f868cc7d19d0ac860cbe64198`).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-03-19_04-43-base...release-2026-03-26_04-51-base).
## Features:
* [`8cad6d751`](https://github.com/dfinity/ic/commit/8cad6d751) Consensus: Let nodes detect if their subnet was deleted ([#9436](https://github.com/dfinity/ic/pull/9436))
* [`357c98f9d`](https://github.com/dfinity/ic/commit/357c98f9d) Consensus: Add subnet type to the NNS delegation ([#9456](https://github.com/dfinity/ic/pull/9456))
* [`30270d618`](https://github.com/dfinity/ic/commit/30270d618) Consensus(firewall): firewall adjustments for cloud engine nodes ([#9315](https://github.com/dfinity/ic/pull/9315))
* [`10cb51457`](https://github.com/dfinity/ic/commit/10cb51457) Interface: add subnet resource limits to registry subnet record ([#9386](https://github.com/dfinity/ic/pull/9386))
* [`99d83abb1`](https://github.com/dfinity/ic/commit/99d83abb1) Node: subnet read_state limited cache ([#9239](https://github.com/dfinity/ic/pull/9239))
* [`bc7f8c3fc`](https://github.com/dfinity/ic/commit/bc7f8c3fc) DSM: Isolate XNet on engines ([#9449](https://github.com/dfinity/ic/pull/9449))
* [`9946ea7b3`](https://github.com/dfinity/ic/commit/9946ea7b3) DSM: enforce maximum subnet delta from registry in DSM ([#9552](https://github.com/dfinity/ic/pull/9552))
* [`84d6db8b6`](https://github.com/dfinity/ic/commit/84d6db8b6) DSM: add maximum state delta to subnet resource limits in registry ([#9506](https://github.com/dfinity/ic/pull/9506))
* [`2236fabe4`](https://github.com/dfinity/ic/commit/2236fabe4) DSM: enforce maximum subnet state size from registry in DSM ([#9299](https://github.com/dfinity/ic/pull/9299))
* [`861fcc986`](https://github.com/dfinity/ic/commit/861fcc986) DSM: own subnet resource limits in SystemMetadata ([#9511](https://github.com/dfinity/ic/pull/9511))
* [`07892b9f4`](https://github.com/dfinity/ic/commit/07892b9f4) DSM: Execute some subnet messages after instructions exceeded ([#9460](https://github.com/dfinity/ic/pull/9460))
## Bugfixes:
* [`8de0763d4`](https://github.com/dfinity/ic/commit/8de0763d4) Consensus(orchestrator): mock starting processes in upgrade unit tests ([#9528](https://github.com/dfinity/ic/pull/9528))
* [`660a40ee6`](https://github.com/dfinity/ic/commit/660a40ee6) Consensus(orchestrator): mock starting the replica process in upgrade unit tests ([#9521](https://github.com/dfinity/ic/pull/9521))
* [`d903d49dc`](https://github.com/dfinity/ic/commit/d903d49dc) Node: vsock client reads until EOF to handle fragmented responses ([#9559](https://github.com/dfinity/ic/pull/9559))
* [`0aec49d4b`](https://github.com/dfinity/ic/commit/0aec49d4b) Node: transfer_log_state: ensure /mnt/var_new/log/journal exists before copying old journal logs ([#9566](https://github.com/dfinity/ic/pull/9566))
* [`c4ac5c7fd`](https://github.com/dfinity/ic/commit/c4ac5c7fd) DSM: Reset a canister's priority credit when aborted ([#8947](https://github.com/dfinity/ic/pull/8947))
* [`a26ae175b`](https://github.com/dfinity/ic/commit/a26ae175b) DSM(canister_logging): bug fixes and code cleanup  ([#9479](https://github.com/dfinity/ic/pull/9479))
* [`c485352be`](https://github.com/dfinity/ic/commit/c485352be) DSM: use CanisterManagerError::CanisterHeapDeltaRateLimited instead of CanisterManagerError::WasmChunkStoreError ([#9502](https://github.com/dfinity/ic/pull/9502))
* [`da43d0cdf`](https://github.com/dfinity/ic/commit/da43d0cdf) DSM: RenameCanister not allowed on aborted canister ([#9465](https://github.com/dfinity/ic/pull/9465))
## Performance improvements:
## Chores:
* [`b608c374f`](https://github.com/dfinity/ic/commit/b608c374f) Consensus,DSM: 42u64 -> 42_u64 ([#9523](https://github.com/dfinity/ic/pull/9523))
* [`06b463210`](https://github.com/dfinity/ic/commit/06b463210) Node: Improve IC-OS logging ([#9587](https://github.com/dfinity/ic/pull/9587))
* [`df0a2ee65`](https://github.com/dfinity/ic/commit/df0a2ee65) Node: Take NNS public key override from config.json ([#9550](https://github.com/dfinity/ic/pull/9550))
* [`b7be68792`](https://github.com/dfinity/ic/commit/b7be68792) Node: Update Base Image Refs [2026-03-19-0811] ([#9468](https://github.com/dfinity/ic/pull/9468))
* [`11279b19a`](https://github.com/dfinity/ic/commit/11279b19a) DSM(bitcoin/dogecoin): bump bitcoin and dogecoin canisters to latest version ([#9150](https://github.com/dfinity/ic/pull/9150))
* [`b3ed2bec1`](https://github.com/dfinity/ic/commit/b3ed2bec1) DSM: run didc breaking changes with 'bazel run' ([#9486](https://github.com/dfinity/ic/pull/9486))
## Refactoring:
* [`5b04d8c3c`](https://github.com/dfinity/ic/commit/5b04d8c3c) DSM: CanisterManager does not push messages to ReplicatedState ([#9561](https://github.com/dfinity/ic/pull/9561))
* [`62be83f09`](https://github.com/dfinity/ic/commit/62be83f09) DSM: CanisterManager does not read time and cost schedule from ReplicatedState ([#9560](https://github.com/dfinity/ic/pull/9560))
* [`c78f0f923`](https://github.com/dfinity/ic/commit/c78f0f923) DSM: wrap expected_compiled_wasms in SystemMetadata into Arc ([#9478](https://github.com/dfinity/ic/pull/9478))
* [`49eea890c`](https://github.com/dfinity/ic/commit/49eea890c) DSM: get snapshot canister state for loading snapshot outside of CanisterManager ([#9483](https://github.com/dfinity/ic/pull/9483))
* [`b05b03182`](https://github.com/dfinity/ic/commit/b05b03182) DSM: Make access to constructing NominalCycles more restricted ([#9487](https://github.com/dfinity/ic/pull/9487))
* [`d7b342387`](https://github.com/dfinity/ic/commit/d7b342387) DSM: do not derive cycles from instructions in CanisterManager ([#9484](https://github.com/dfinity/ic/pull/9484))
* [`388b943c2`](https://github.com/dfinity/ic/commit/388b943c2) DSM: Move CanisterCyclesCostSchedule to ic_types_cycles ([#9464](https://github.com/dfinity/ic/pull/9464))
## Tests:
* [`da8240c5f`](https://github.com/dfinity/ic/commit/da8240c5f) Consensus,Node(nns-recovery): test NNS Recovery where all nodes are broken ([#8847](https://github.com/dfinity/ic/pull/8847))
* [`29032fd65`](https://github.com/dfinity/ic/commit/29032fd65) DSM: fix tests affected by enabling log_memory_store feature ([#9451](https://github.com/dfinity/ic/pull/9451))
## Other changes:
* [`15ffad9e1`](https://github.com/dfinity/ic/commit/15ffad9e1) Consensus(orchestrator): mock starting the replica process in upgrade unit tests ([#9526](https://github.com/dfinity/ic/pull/9526))
* [`8f73b3265`](https://github.com/dfinity/ic/commit/8f73b3265) Consensus,DSM: Enforce 42_u64, not 42u64. ([#9452](https://github.com/dfinity/ic/pull/9452))
Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/0df6430ba4989ba9c745c5222727b6723524fc80/replica-releases/17d483c60a09b393ad82a2091b68a242ac69c72d.md).

# IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run:

```
# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/17d483c60a09b393ad82a2091b68a242ac69c72d/ci/scripts/repro-check | python3 - -c 17d483c60a09b393ad82a2091b68a242ac69c72d --guestos
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.


Elect new IC/GuestOS revision (commit 17d483c)