Release Notes for [release-2026-06-04_04-52-base](https://github.com/dfinity/ic/tree/release-2026-06-04_04-52-base) (`b95f4a32b41798de115aac9298b51dd1662f1da5`)
This release is based on changes since [release-2026-05-29_04-44-base](https://dashboard.internetcomputer.org/release/a47e5434753752c1d2972fbc4407d14f88964285) (`a47e5434753752c1d2972fbc4407d14f88964285`).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-05-29_04-44-base...release-2026-06-04_04-52-base).
## Features:
* [`7e3b8e3c7`](https://github.com/dfinity/ic/commit/7e3b8e3c7) Core Protocol: Drop blessed versions from a few components ([#10366](https://github.com/dfinity/ic/pull/10366))
* [`e1d449192`](https://github.com/dfinity/ic/commit/e1d449192) Core Protocol: Use `CanisterStates` in `ReplicatedState` ([#10287](https://github.com/dfinity/ic/pull/10287))
* [`849ed7719`](https://github.com/dfinity/ic/commit/849ed7719) Core Protocol: Lower frequency storage charging ([#10306](https://github.com/dfinity/ic/pull/10306))
* [`69d15cdf7`](https://github.com/dfinity/ic/commit/69d15cdf7) Core Protocol: Charge for storage after aborting DTS executions ([#10305](https://github.com/dfinity/ic/pull/10305))
* [`310abcc1c`](https://github.com/dfinity/ic/commit/310abcc1c) Core Protocol(execution): set SEV-enabled subnet reference size to 7 ([#9754](https://github.com/dfinity/ic/pull/9754))
* [`1e06fa65a`](https://github.com/dfinity/ic/commit/1e06fa65a) Core Protocol(crypto): Introduce batched signature verification with multiple messages ([#10339](https://github.com/dfinity/ic/pull/10339))
* [`a65aa3ae6`](https://github.com/dfinity/ic/commit/a65aa3ae6) Core Protocol: Add VCPU type to GuestLaunchMeasurementMetadata ([#10245](https://github.com/dfinity/ic/pull/10245))
* [`781399529`](https://github.com/dfinity/ic/commit/781399529) Core Protocol: Add `ColdStats` aggregate to `CanisterStates` ([#10286](https://github.com/dfinity/ic/pull/10286))
* [`4d24c52ca`](https://github.com/dfinity/ic/commit/4d24c52ca) Core Protocol: Charge a base cost per canister ([#10292](https://github.com/dfinity/ic/pull/10292))
* [`86ae75eed`](https://github.com/dfinity/ic/commit/86ae75eed) Node: Update CI/build images to 26.04 ([#10208](https://github.com/dfinity/ic/pull/10208))
* [`8dc9fa9ad`](https://github.com/dfinity/ic/commit/8dc9fa9ad) Node: drop sudo in proc_wrapper.sh ([#10361](https://github.com/dfinity/ic/pull/10361))
* [`fd5c29bc5`](https://github.com/dfinity/ic/commit/fd5c29bc5) Node: Strip timestamps from base images ([#10331](https://github.com/dfinity/ic/pull/10331))
* [`e24d8cd77`](https://github.com/dfinity/ic/commit/e24d8cd77) Node: Add SEV keyslot metadata ([#10343](https://github.com/dfinity/ic/pull/10343))
## Bugfixes:
* [`cfae1be4c`](https://github.com/dfinity/ic/commit/cfae1be4c) Core Protocol: uninstall_code does not deallocate canister log ([#10379](https://github.com/dfinity/ic/pull/10379))
* [`03a203b68`](https://github.com/dfinity/ic/commit/03a203b68) Core Protocol: check for canister heap delta rate limit in update_settings ([#10380](https://github.com/dfinity/ic/pull/10380))
* [`9823889c6`](https://github.com/dfinity/ic/commit/9823889c6) Core Protocol: persist log_memory_store_persistent_next_idx ([#10374](https://github.com/dfinity/ic/pull/10374))
* [`e403b334e`](https://github.com/dfinity/ic/commit/e403b334e) Core Protocol: Abort download of stripped messages if surrounding block becomes unwanted ([#10365](https://github.com/dfinity/ic/pull/10365))
## Performance improvements:
* [`85c79d423`](https://github.com/dfinity/ic/commit/85c79d423) Core Protocol: Directly serialize signed bytes into `Vec` holding domain separator ([#10351](https://github.com/dfinity/ic/pull/10351))
## Chores:
* [`caa989ce3`](https://github.com/dfinity/ic/commit/caa989ce3) Owners: bump rkyv, openssl and tar ([#10359](https://github.com/dfinity/ic/pull/10359))
* [`b95f4a32b`](https://github.com/dfinity/ic/commit/b95f4a32b) Node: Update Base Image Refs [2026-06-03-1831] ([#10381](https://github.com/dfinity/ic/pull/10381))
* [`3c71fa835`](https://github.com/dfinity/ic/commit/3c71fa835) Node: Exclude debug logs in guest_disk ([#10348](https://github.com/dfinity/ic/pull/10348))
## Tests:
* [`5560103d2`](https://github.com/dfinity/ic/commit/5560103d2) Core Protocol: make `FakeStateManager` return a valid height witness ([#10364](https://github.com/dfinity/ic/pull/10364))
Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/4bcc1c47a9c1e20f77076d47b1853ddf4297cda5/replica-releases/b95f4a32b41798de115aac9298b51dd1662f1da5.md).

# IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run:

```
# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/b95f4a32b41798de115aac9298b51dd1662f1da5/ci/scripts/repro-check | python3 - -c b95f4a32b41798de115aac9298b51dd1662f1da5 --guestos
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.