DFINITY Foundation

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8YearGangDAO

Isaac Valadez

Krzysztof

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Taggr Network

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

cyberowl

Dexter Caff/acc

JMVR

Smacker

HashEra

Change the set of elected GuestOS versions.

The version to elect (identified by the hash of the installation image) is added to the registry. Besides creating a record for that version, the proposal also appends that version to the list of elected versions that can be installed on nodes of a subnet.

Only elected GuestOS versions can be deployed.

Release Notes for [release-2026-04-24_04-21-base](https://github.com/dfinity/ic/tree/release-2026-04-24_04-21-base) (`920df8055260f443ac3335cc0f2b06e285a688b4`)
This release is based on changes since [release-2026-04-16_04-20-base](https://dashboard.internetcomputer.org/release/719ff387aab462ce5759c4c20c30de959fe9538c) (`719ff387aab462ce5759c4c20c30de959fe9538c`).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-04-16_04-20-base...release-2026-04-24_04-21-base).
## Features:
* [`920df8055`](https://github.com/dfinity/ic/commit/920df8055) Consensus: enable asynchronous canister creation with subnet ID in the URL ([#9982](https://github.com/dfinity/ic/pull/9982))
* [`a8beefd1a`](https://github.com/dfinity/ic/commit/a8beefd1a) Consensus: enable listing canisters via query call with subnet ID in the URL ([#9977](https://github.com/dfinity/ic/pull/9977))
* [`aef1670e2`](https://github.com/dfinity/ic/commit/aef1670e2) Consensus(recovery): allow to override what state height to download ([#9707](https://github.com/dfinity/ic/pull/9707))
* [`904f4dde6`](https://github.com/dfinity/ic/commit/904f4dde6) Consensus: add node reward types type4.1 through type4.5 for cloud engines ([#9954](https://github.com/dfinity/ic/pull/9954))
* [`22853ca24`](https://github.com/dfinity/ic/commit/22853ca24) Consensus: Helper functions to create `NiDkgConfig`s from request contexts ([#9926](https://github.com/dfinity/ic/pull/9926))
* [`1354e5d62`](https://github.com/dfinity/ic/commit/1354e5d62) Consensus(flexible-outcalls): deliver flexible errors to execution ([#9925](https://github.com/dfinity/ic/pull/9925))
* [`6ab9da34e`](https://github.com/dfinity/ic/commit/6ab9da34e) Consensus: enable canister creation with subnet ID in the URL ([#9919](https://github.com/dfinity/ic/pull/9919))
* [`32a9bc65b`](https://github.com/dfinity/ic/commit/32a9bc65b) Consensus(flexible-outcalls): extend ResponsesTooLarge error for good error message ([#9908](https://github.com/dfinity/ic/pull/9908))
* [`cdc89c17e`](https://github.com/dfinity/ic/commit/cdc89c17e) Consensus(flexible-outcalls): harden ResponsesTooLarge validation with all-seen-shares proof ([#9860](https://github.com/dfinity/ic/pull/9860))
* [`2a7237e73`](https://github.com/dfinity/ic/commit/2a7237e73) Consensus: Include NiDKG dealings into blocks based on priority ([#9766](https://github.com/dfinity/ic/pull/9766))
* [`d7f0b4808`](https://github.com/dfinity/ic/commit/d7f0b4808) Node: add Xen modules to GuestOS initramfs ([#9957](https://github.com/dfinity/ic/pull/9957))
* [`20c64cb87`](https://github.com/dfinity/ic/commit/20c64cb87) Node: Improve open_rootfs logging ([#9909](https://github.com/dfinity/ic/pull/9909))
* [`a95a31edd`](https://github.com/dfinity/ic/commit/a95a31edd) DSM: Allow `SetupInitialDkg` requests to be answered by subnets other than NNS ([#9782](https://github.com/dfinity/ic/pull/9782))
* [`09a5f7d51`](https://github.com/dfinity/ic/commit/09a5f7d51) DSM: add canister_log_retention_seconds metric ([#9952](https://github.com/dfinity/ic/pull/9952))
* [`9f2aba1ef`](https://github.com/dfinity/ic/commit/9f2aba1ef) DSM: add canister_log_resize_duration_seconds metric ([#9948](https://github.com/dfinity/ic/pull/9948))
* [`d28780e61`](https://github.com/dfinity/ic/commit/d28780e61) DSM: Asynchronous hashing ([#8464](https://github.com/dfinity/ic/pull/8464))
* [`987cf4428`](https://github.com/dfinity/ic/commit/987cf4428) DSM: calibrate fetch_canister_logs fee and add benchmarks ([#9911](https://github.com/dfinity/ic/pull/9911))
* [`c297176a1`](https://github.com/dfinity/ic/commit/c297176a1) DSM: Store prepayment for call transmission ([#9859](https://github.com/dfinity/ic/pull/9859))
* [`227397cc7`](https://github.com/dfinity/ic/commit/227397cc7) DSM: charge cycles for log memory resize in update_settings ([#9883](https://github.com/dfinity/ic/pull/9883))
* [`7a01420d2`](https://github.com/dfinity/ic/commit/7a01420d2) DSM: ExecutionEnvironment::execute_mgmt_operation_on_canister ([#9840](https://github.com/dfinity/ic/pull/9840))
## Bugfixes:
* [`ccf75a06b`](https://github.com/dfinity/ic/commit/ccf75a06b) Consensus: revert "perf(crypto): Use Rayon in NIDKG ([#9007](https://github.com/dfinity/ic/pull/9007))" ([#9968](https://github.com/dfinity/ic/pull/9968))
* [`1a389f9a7`](https://github.com/dfinity/ic/commit/1a389f9a7) Consensus,DSM: move certified height channel for HTTP handler to StateManagerImpl ([#9850](https://github.com/dfinity/ic/pull/9850))
* [`7bfc38f6c`](https://github.com/dfinity/ic/commit/7bfc38f6c) Node: revert "chore: Update Base Image Refs [2026-04-17-2049] ([#9931](https://github.com/dfinity/ic/pull/9931))" ([#9951](https://github.com/dfinity/ic/pull/9951))
* [`5bb214b6a`](https://github.com/dfinity/ic/commit/5bb214b6a) Node: deflake //rs/tests/networking:canister_http_flexible_test ([#9857](https://github.com/dfinity/ic/pull/9857))
* [`ebfe8f011`](https://github.com/dfinity/ic/commit/ebfe8f011) DSM: Revert async hashing ([#10001](https://github.com/dfinity/ic/pull/10001))
* [`bbca16b00`](https://github.com/dfinity/ic/commit/bbca16b00) DSM: notify sync update call HTTP handler with correct state height ([#9938](https://github.com/dfinity/ic/pull/9938))
* [`441bcf18d`](https://github.com/dfinity/ic/commit/441bcf18d) DSM: SyncMessageRouting::expected_batch_height ([#9917](https://github.com/dfinity/ic/pull/9917))
* [`cafe032cd`](https://github.com/dfinity/ic/commit/cafe032cd) DSM: Pin the Store in WasmtimeInstance ([#9892](https://github.com/dfinity/ic/pull/9892))
* [`f017c8dad`](https://github.com/dfinity/ic/commit/f017c8dad) DSM: Use async-signal-safe mutex in SIGSEGV handler ([#9893](https://github.com/dfinity/ic/pull/9893))
## Performance improvements:
* [`6a31f4c29`](https://github.com/dfinity/ic/commit/6a31f4c29) Consensus(idkg): reduce the number of signature share validations ([#9907](https://github.com/dfinity/ic/pull/9907))
* [`dd1ef70ce`](https://github.com/dfinity/ic/commit/dd1ef70ce) Consensus(crypto): Use Rayon in NIDKG ([#9007](https://github.com/dfinity/ic/pull/9007))
## Chores:
* [`31a57369d`](https://github.com/dfinity/ic/commit/31a57369d) Consensus: error log if the status of call is unknown in sync call handler certificate ([#9975](https://github.com/dfinity/ic/pull/9975))
* [`26aa522de`](https://github.com/dfinity/ic/commit/26aa522de) Consensus: Use `StateReader` instead of `StateManager` where possible ([#9899](https://github.com/dfinity/ic/pull/9899))
* [`2d1bd5cf3`](https://github.com/dfinity/ic/commit/2d1bd5cf3) Consensus: Report more error metrics during IDKG payload building ([#9885](https://github.com/dfinity/ic/pull/9885))
* [`ed57a4648`](https://github.com/dfinity/ic/commit/ed57a4648) Consensus,DSM: Reject missing subnet type when checking canister sig delegations ([#9928](https://github.com/dfinity/ic/pull/9928))
* [`607599cc8`](https://github.com/dfinity/ic/commit/607599cc8) Node: also echo init-console logs to console ([#9995](https://github.com/dfinity/ic/pull/9995))
* [`b14cf758a`](https://github.com/dfinity/ic/commit/b14cf758a) Node: Remove broken var catch ([#9943](https://github.com/dfinity/ic/pull/9943))
* [`1c16bab5a`](https://github.com/dfinity/ic/commit/1c16bab5a) Node: Update Base Image Refs [2026-04-17-2049] ([#9931](https://github.com/dfinity/ic/pull/9931))
* [`14eb53f6d`](https://github.com/dfinity/ic/commit/14eb53f6d) DSM: use debug_assert_eq instead of assert_eq in production code ([#9997](https://github.com/dfinity/ic/pull/9997))
* [`e899b4a23`](https://github.com/dfinity/ic/commit/e899b4a23) DSM: add flag const and tune buckets for canister log metrics ([#9971](https://github.com/dfinity/ic/pull/9971))
* [`ba8c15256`](https://github.com/dfinity/ic/commit/ba8c15256) DSM: replace CanisterSnapshotNotEnoughCycles by NotEnoughCycles ([#9921](https://github.com/dfinity/ic/pull/9921))
* [`9a172ceed`](https://github.com/dfinity/ic/commit/9a172ceed) DSM: sort derive traits in Rust files for team-dsm ([#9902](https://github.com/dfinity/ic/pull/9902))
* [`28477268f`](https://github.com/dfinity/ic/commit/28477268f) DSM: track subnet query message response size in metrics ([#9875](https://github.com/dfinity/ic/pull/9875))
## Refactoring:
* [`3640fe381`](https://github.com/dfinity/ic/commit/3640fe381) Consensus: merge canister and subnet read state endpoint code ([#9941](https://github.com/dfinity/ic/pull/9941))
* [`474a744e6`](https://github.com/dfinity/ic/commit/474a744e6) Consensus(flexible-outcalls): rename TooManyRequestErrors to TooManyRejects ([#9927](https://github.com/dfinity/ic/pull/9927))
* [`feb61fd72`](https://github.com/dfinity/ic/commit/feb61fd72) DSM: CanisterManager::cycles_and_memory_usage_checks_and_updates ([#9912](https://github.com/dfinity/ic/pull/9912))
## Tests:
## Documentation:
Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/abad83d9ad215a63364c895c7b272930417199d7/replica-releases/920df8055260f443ac3335cc0f2b06e285a688b4.md).

# IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run:

```
# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/920df8055260f443ac3335cc0f2b06e285a688b4/ci/scripts/repro-check | python3 - -c 920df8055260f443ac3335cc0f2b06e285a688b4 --guestos
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.


Elect new IC/GuestOS revision (commit 920df80)