Release Notes for [release-2025-11-06_03-24-base](https://github.com/dfinity/ic/tree/release-2025-11-06_03-24-base) (`03783153d1596a81311b38cc1602063c400a3c8a`)
This release is based on changes since [release-2025-10-30_03-22-base](https://dashboard.internetcomputer.org/release/199fb796c4a81ac43c6886d21bfa2b66ee3a8cd6) (`199fb796c4a81ac43c6886d21bfa2b66ee3a8cd6`).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2025-10-30_03-22-base...release-2025-11-06_03-24-base).
## Features:
* [`4321b7900`](https://github.com/dfinity/ic/commit/4321b7900) Execution,Interface: canister history records who requested canister renaming ([#7516](https://github.com/dfinity/ic/pull/7516))
* [`7a8c16764`](https://github.com/dfinity/ic/commit/7a8c16764) Execution,Interface: memory allocation does not limit memory usage ([#7006](https://github.com/dfinity/ic/pull/7006))
* [`804b44cde`](https://github.com/dfinity/ic/commit/804b44cde) Interface,Node: Monitor from the HostOS whether GuestOS boot was successful using the serial output ([#7507](https://github.com/dfinity/ic/pull/7507))
* [`32e6efe28`](https://github.com/dfinity/ic/commit/32e6efe28) Interface,Node(node): restrict SEV prod state injection via is_sev_active (again) ([#7548](https://github.com/dfinity/ic/pull/7548))
* [`e5c1ea645`](https://github.com/dfinity/ic/commit/e5c1ea645) Interface,Node(node): restrict SEV prod state injection via is_sev_active ([#7470](https://github.com/dfinity/ic/pull/7470))
## Bugfixes:
* [`8f8450a5f`](https://github.com/dfinity/ic/commit/8f8450a5f) Execution,Interface: memory usage updates after clearing chunk store ([#7517](https://github.com/dfinity/ic/pull/7517))
## Chores:
* [`7c0cfcd00`](https://github.com/dfinity/ic/commit/7c0cfcd00) Execution,Interface: bump wasmtime to v38.0.3 ([#7526](https://github.com/dfinity/ic/pull/7526))
* [`54879a418`](https://github.com/dfinity/ic/commit/54879a418) Interface: modularize rules_motoko & moc: 0.8.7 -> 0.16.3 ([#7460](https://github.com/dfinity/ic/pull/7460))
* [`f7fefc7f1`](https://github.com/dfinity/ic/commit/f7fefc7f1) Interface,Node: Move NNS public key under /run and refactor config bootstraping ([#7388](https://github.com/dfinity/ic/pull/7388))
* [`2e23d93bf`](https://github.com/dfinity/ic/commit/2e23d93bf) Interface,Node: Bump SEV library version and address some TODOs ([#7538](https://github.com/dfinity/ic/pull/7538))
* [`0cc4d11d4`](https://github.com/dfinity/ic/commit/0cc4d11d4) Interface,Node: A more secure and reliable way of checking SEV availability ([#7534](https://github.com/dfinity/ic/pull/7534))
* [`a11baaae9`](https://github.com/dfinity/ic/commit/a11baaae9) Interface,Node(node): remove deprecated logging config fields ([#7500](https://github.com/dfinity/ic/pull/7500))
* [`dafcfada9`](https://github.com/dfinity/ic/commit/dafcfada9) Owners: bump wasm tools to v240 ([#7533](https://github.com/dfinity/ic/pull/7533))
* [`47451083f`](https://github.com/dfinity/ic/commit/47451083f) Node: Update Base Image Refs [2025-11-04-1631] ([#7542](https://github.com/dfinity/ic/pull/7542))
* [`ec5ca68d2`](https://github.com/dfinity/ic/commit/ec5ca68d2) Node: Add setup-ssh-user-keys logging ([#7478](https://github.com/dfinity/ic/pull/7478))
* [`e35169b99`](https://github.com/dfinity/ic/commit/e35169b99) Node: Update Base Image Refs [2025-10-30-2004] ([#7491](https://github.com/dfinity/ic/pull/7491))
## Refactoring:
* [`4652fc613`](https://github.com/dfinity/ic/commit/4652fc613) Execution,Interface: use generic functions for memory usage checks and updates when deleting canister snapshot ([#7514](https://github.com/dfinity/ic/pull/7514))
## Tests:
* [`f55caf21c`](https://github.com/dfinity/ic/commit/f55caf21c) Node: Implement script for quick reloading of the HostOS ([#7399](https://github.com/dfinity/ic/pull/7399))
## Documentation:
## Other changes:
* [`d5e4da24c`](https://github.com/dfinity/ic/commit/d5e4da24c) Interface,Node(node): restrict SEV prod state injection via is_sev_active ([#7523](https://github.com/dfinity/ic/pull/7523))
Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/b35b282952d1236c36151796d11cad41e274a5b4/replica-releases/03783153d1596a81311b38cc1602063c400a3c8a.md).

# IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run:

```
# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/03783153d1596a81311b38cc1602063c400a3c8a/ci/scripts/repro-check | python3 - -c 03783153d1596a81311b38cc1602063c400a3c8a --guestos
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.
