Release Notes for [release-2026-10-08_03-33-base](https://github.com/dfinity/ic/tree/release-2026-10-08_03-33-base) (`4a0dbb9251df6da0b65ab7a4d35e9a9871f58510`)
This release is based on changes since [release-2026-10-02_03-31-base](https://dashboard.internetcomputer.org/release/2cdff28573522b2c9c5e96a4407b50281eb82b5c) (`2cdff28573522b2c9c5e96a4407b50281eb82b5c`).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-10-02_03-31-base...release-2026-10-08_03-33-base).
## Features:
* [`9debdbf06`](https://github.com/dfinity/ic/commit/9debdbf06) Core Protocol: use the monotonic consumed cycles by use case in metrics, deletion and install_code ([#11776](https://github.com/dfinity/ic/pull/11776))
* [`5291ec811`](https://github.com/dfinity/ic/commit/5291ec811) Core Protocol: certification version V30 with monotonic consumed cycles in subnet metrics ([#11777](https://github.com/dfinity/ic/pull/11777))
* [`fca9b57bd`](https://github.com/dfinity/ic/commit/fca9b57bd) Core Protocol(https_outcalls): only accept canonically encoded canister HTTP payloads ([#11751](https://github.com/dfinity/ic/pull/11751))
* [`9c1d7369d`](https://github.com/dfinity/ic/commit/9c1d7369d) Core Protocol: Heap accessor ([#11755](https://github.com/dfinity/ic/pull/11755))
* [`edc96f17a`](https://github.com/dfinity/ic/commit/edc96f17a) Core Protocol(outcalls): export the instructions executed by canister HTTP transforms ([#11758](https://github.com/dfinity/ic/pull/11758))
* [`5aa2e5bf1`](https://github.com/dfinity/ic/commit/5aa2e5bf1) Core Protocol: Shadow pull schedule and discrepancy metric ([#11743](https://github.com/dfinity/ic/pull/11743))
## Bugfixes:
* [`1a9202b28`](https://github.com/dfinity/ic/commit/1a9202b28) Core Protocol(orchestrator): make NNS Recovery on Failover Nodes retry-safe ([#11768](https://github.com/dfinity/ic/pull/11768))
* [`69df77008`](https://github.com/dfinity/ic/commit/69df77008) Core Protocol: disable full Candid error messages when decoding ic0.cost_http_request_v2 params ([#11773](https://github.com/dfinity/ic/pull/11773))
* [`a2e8120da`](https://github.com/dfinity/ic/commit/a2e8120da) Core Protocol: Reject reserved name ([#11764](https://github.com/dfinity/ic/pull/11764))
* [`2b4e31114`](https://github.com/dfinity/ic/commit/2b4e31114) Core Protocol: Manifest for already deleted checkpoint ([#11740](https://github.com/dfinity/ic/pull/11740))
* [`f8d59e519`](https://github.com/dfinity/ic/commit/f8d59e519) Node(metrics-proxy): resolve upstream hosts via the system resolver ([#11767](https://github.com/dfinity/ic/pull/11767))
## Chores:
* [`2d842c7eb`](https://github.com/dfinity/ic/commit/2d842c7eb) Core Protocol: drop SubnetMetrics::consumed_cycles_by_use_case_monotonic ([#11775](https://github.com/dfinity/ic/pull/11775))
* [`bb1dfc2d7`](https://github.com/dfinity/ic/commit/bb1dfc2d7) Core Protocol: drop the cycles metrics migrations ([#11772](https://github.com/dfinity/ic/pull/11772))
* [`414fd6ab2`](https://github.com/dfinity/ic/commit/414fd6ab2) Core Protocol: bump candid to 0.10.37 ([#11774](https://github.com/dfinity/ic/pull/11774))
* [`56ffd81ee`](https://github.com/dfinity/ic/commit/56ffd81ee) Core Protocol: Remove old clippy issue ([#11760](https://github.com/dfinity/ic/pull/11760))
* [`bf17c1c30`](https://github.com/dfinity/ic/commit/bf17c1c30) Core Protocol(dkg): remove summary's transcripts for remote subnets (4/4) ([#11224](https://github.com/dfinity/ic/pull/11224))
* [`905560f5c`](https://github.com/dfinity/ic/commit/905560f5c) Core Protocol: rustc: 1.98.1 -> 1.99.0 ([#11735](https://github.com/dfinity/ic/pull/11735))
* [`9a3a386f3`](https://github.com/dfinity/ic/commit/9a3a386f3) Core Protocol: cargo clippy fixes to prepare for the rustc upgrade: 1.98.1 -> 1.99.0 ([#11734](https://github.com/dfinity/ic/pull/11734))
## Refactoring:
* [`e53d0331f`](https://github.com/dfinity/ic/commit/e53d0331f) Core Protocol: Split the single-subnet pull out of `PoolRefillTask`'s sweep ([#11732](https://github.com/dfinity/ic/pull/11732))
* [`effa4f63d`](https://github.com/dfinity/ic/commit/effa4f63d) Core Protocol: Clean up naming, comments and tests in the XNet payload builder ([#11728](https://github.com/dfinity/ic/pull/11728))
* [`f7ea73a5b`](https://github.com/dfinity/ic/commit/f7ea73a5b) Core Protocol(outcalls): split the adapter channel out of the client constructor ([#11745](https://github.com/dfinity/ic/pull/11745))
## Tests:
* [`37a383bc0`](https://github.com/dfinity/ic/commit/37a383bc0) Core Protocol(consensus): cover secp256r1 ECDSA keys in system tests ([#11762](https://github.com/dfinity/ic/pull/11762))
## Documentation:
Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/299231bdc223e8c9ceaea192a846735d7c88d0a1/replica-releases/4a0dbb9251df6da0b65ab7a4d35e9a9871f58510.md).

# IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run:

```
# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/4a0dbb9251df6da0b65ab7a4d35e9a9871f58510/ci/scripts/repro-check | python3 - -c 4a0dbb9251df6da0b65ab7a4d35e9a9871f58510 --guestos
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.
