DFINITY Foundation

ICDevs.org

CryptoIsGood

Anvil

ICPL.app

ysyms

The Accumulators’ Neuron

RawTech Venture

Paul Young

ICPMANUAL

8YearGangDAO

Isaac Valadez

Krzysztof

Nicolas.ic

Smaug’s Neuron for Retail Investors

ICLight.io

Taggr Network

Sonic AMM

Rakeoff.io

OpenChat

ELNA AI

GEEKFACTORY

ICP Hub México

ICP Hub Poland

Jerry Banfield

WaterNeuron

ICP Hub Bulgaria

Gold DAO

NeuronPool

LORIMER ♾️ 🐶

B3Pay

ZenithCode

Aviate Labs

D-QUORUM

Yuku AI

CO.DELTA △

DragginCorp

Gwojda

Thyassa

🌮 TACO DAO Neuron

Ωmega-reject

Ωmega-vote

αlpha-vote

Cybersecurity

cyberowl

Dexter Caff/acc

JMVR

Smacker

HashEra

Install, reinstall or upgrade code of a canister controlled by the NNS.

# Backend Canister Upgrade

This release reworks the DNS caching used by email recovery: concurrent lookups are merged, known results are served from cache while refreshing in the background, and failures now report their cause. It also removes leftover scaffolding from the completed OpenID credential key migration.


## What's Changed
_Since `proposal-backend-142131`_

* feat(be,fe): generic stale-while-revalidate single-flight cache (#3995)
* feat(be): add sso_domain/sso_name to stored OpenID credentials with batched backfill migration (#4013)
* chore(be): remove OpenID credential key migration scaffolding (#3997)
* refactor(be,fe): explicit DoH fallback for email recovery; de-duplicate wizards (#3992)
* feat(scripts): add create-staging for provisioning new staging envs (#3985)
* feat(be,fe): instrument DoH failure cause for the recovery funnel (#3990)

[Full release notes](https://github.com/dfinity/internet-identity/releases/tag/release-2026-06-12)


## Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the [Internet Identity repository](https://github.com/dfinity/internet-identity):

```
git pull  # to ensure you have the latest changes.
git checkout 9ae51005f9ab8afe26366ad45c8ea706b6ce8d3c
./scripts/verify-hash --ii-hash 917a42d0f8621ab59921b3ad320bdc2fd30951721e1687e7e5d1be035936fce9
```

## Backend Argument Verification

Run the following command to verify the backend upgrade argument hash:

```
didc encode -d ./src/internet_identity/internet_identity.did -t '(opt InternetIdentityInit)' '(
  opt record {
    sso_credential_migration = opt vec {
      record {
        name = opt "DFINITY";
        issuer = "https://dfinity.okta.com";
        discovery_domain = "dfinity.org";
        client_id = "0oa1vmzsb82J4wuj3358";
      };
    };
  },
)' | xxd -r -p | sha256sum
```

The output should match the argument hash.


Upgrade Internet Identity Backend Canister to 9ae51005