Release Notes for [release-2026-09-10_03-28-base](https://github.com/dfinity/ic/tree/release-2026-09-10_03-28-base) (`dea4a9afe8bb2a6c324eb661e52204c6054d8e91`)
This release is based on changes since [release-2026-09-03_04-41-base](https://dashboard.internetcomputer.org/release/7360f8f35bda2e4754bb7f2258d6852feec268e8) (`7360f8f35bda2e4754bb7f2258d6852feec268e8`).

Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.

To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-09-03_04-41-base...release-2026-09-10_03-28-base).
## Features:
* [`5acc0700b`](https://github.com/dfinity/ic/commit/5acc0700b) Core Protocol: Restrict XNet pulls to the caller's own subnet ([#11498](https://github.com/dfinity/ic/pull/11498))
* [`16a19fc06`](https://github.com/dfinity/ic/commit/16a19fc06) Core Protocol: Record in-progress ingress messages after a subnet merge ([#11365](https://github.com/dfinity/ic/pull/11365))
* [`9beec40d7`](https://github.com/dfinity/ic/commit/9beec40d7) Core Protocol: Do not execute canister messages nor queries while cooling down ([#11495](https://github.com/dfinity/ic/pull/11495))
* [`d6e80d7fc`](https://github.com/dfinity/ic/commit/d6e80d7fc) Core Protocol(state_tool): assemble the merged state of a subnet merge ([#11469](https://github.com/dfinity/ic/pull/11469))
* [`7df41498f`](https://github.com/dfinity/ic/commit/7df41498f) Core Protocol: Prefer more useful XNet slices ([#11474](https://github.com/dfinity/ic/pull/11474))
* [`5a7458bfd`](https://github.com/dfinity/ic/commit/5a7458bfd) Core Protocol: Introduce separate replica version ([#11401](https://github.com/dfinity/ic/pull/11401))
* [`a03f3e08d`](https://github.com/dfinity/ic/commit/a03f3e08d) Core Protocol: Add a monotonic `consumed_cycles` total to `CanisterMetrics` ([#11465](https://github.com/dfinity/ic/pull/11465))
* [`6f1d945c7`](https://github.com/dfinity/ic/commit/6f1d945c7) Core Protocol: Larger XNet pool ([#11343](https://github.com/dfinity/ic/pull/11343))
* [`85472b865`](https://github.com/dfinity/ic/commit/85472b865) Core Protocol: Track unhealthy nodes in XNet payload builder ([#11357](https://github.com/dfinity/ic/pull/11357))
* [`86e292867`](https://github.com/dfinity/ic/commit/86e292867) Core Protocol(consensus): report at info level that a halted subnet delivers no batches ([#11466](https://github.com/dfinity/ic/pull/11466))
* [`0fcbceac0`](https://github.com/dfinity/ic/commit/0fcbceac0) Core Protocol: drop warp ([#11448](https://github.com/dfinity/ic/pull/11448))
* [`9c3435c9f`](https://github.com/dfinity/ic/commit/9c3435c9f) Core Protocol: replace 'cached' crate with 'lru' ([#11392](https://github.com/dfinity/ic/pull/11392))
* [`bee44d8cd`](https://github.com/dfinity/ic/commit/bee44d8cd) Core Protocol: drop 'thousands' crate ([#11395](https://github.com/dfinity/ic/pull/11395))
* [`6dd980b88`](https://github.com/dfinity/ic/commit/6dd980b88) Core Protocol: drop wsl crate ([#11429](https://github.com/dfinity/ic/pull/11429))
## Bugfixes:
* [`dea4a9afe`](https://github.com/dfinity/ic/commit/dea4a9afe) Core Protocol: Reliably garbage collect reject signals ([#11263](https://github.com/dfinity/ic/pull/11263))
* [`8a0978ebc`](https://github.com/dfinity/ic/commit/8a0978ebc) Core Protocol: Relax the condition on routing refunds into streams ([#11511](https://github.com/dfinity/ic/pull/11511))
* [`1e9df5957`](https://github.com/dfinity/ic/commit/1e9df5957) Core Protocol(ic-heap-bytes): account for the ArcInner allocation in Arc<T> ([#11513](https://github.com/dfinity/ic/pull/11513))
* [`57a303805`](https://github.com/dfinity/ic/commit/57a303805) Core Protocol(EXC): Time out stop_canister requests without a call ID ([#11430](https://github.com/dfinity/ic/pull/11430))
* [`e25b7c37c`](https://github.com/dfinity/ic/commit/e25b7c37c) Core Protocol(replicated_state): truncate canister log records when log capacity shrinks ([#11396](https://github.com/dfinity/ic/pull/11396))
* [`476e4ff5c`](https://github.com/dfinity/ic/commit/476e4ff5c) Core Protocol: correctly map canister error calls ([#11171](https://github.com/dfinity/ic/pull/11171))
* [`0f341f655`](https://github.com/dfinity/ic/commit/0f341f655) Core Protocol: Refund the prepayment of an `install_code` dropped by a subnet split ([#11464](https://github.com/dfinity/ic/pull/11464))
* [`b7d8c2b01`](https://github.com/dfinity/ic/commit/b7d8c2b01) Core Protocol: use given registry version when making registry CUPs ([#11433](https://github.com/dfinity/ic/pull/11433))
## Performance improvements:
* [`066f4e22d`](https://github.com/dfinity/ic/commit/066f4e22d) Core Protocol: Reduce CertifiedSlicePool lock contention ([#11456](https://github.com/dfinity/ic/pull/11456))
* [`065e28175`](https://github.com/dfinity/ic/commit/065e28175) Core Protocol: Validate HTTPS outcall signatures in parallel ([#11450](https://github.com/dfinity/ic/pull/11450))
## Chores:
* [`a99988578`](https://github.com/dfinity/ic/commit/a99988578) Core Protocol(dkg): remove summary's transcripts for remote subnets (2/4) ([#11221](https://github.com/dfinity/ic/pull/11221))
* [`f2910a834`](https://github.com/dfinity/ic/commit/f2910a834) Core Protocol(crypto): remove stale unused_assignments allow ([#11472](https://github.com/dfinity/ic/pull/11472))
* [`dc8695c52`](https://github.com/dfinity/ic/commit/dc8695c52) Core Protocol: Use `validate_response_share` for divergence and non-flexible responses ([#11447](https://github.com/dfinity/ic/pull/11447))
* [`3a5aff3ad`](https://github.com/dfinity/ic/commit/3a5aff3ad) Core Protocol: update UVM and P8s images that now have daemonize and python3 in scope ([#11444](https://github.com/dfinity/ic/pull/11444))
* [`560f51cb1`](https://github.com/dfinity/ic/commit/560f51cb1) Core Protocol,Node: Limit port 19522 (SEV key exchange server) to be called by the peer VM only ([#11440](https://github.com/dfinity/ic/pull/11440))
* [`fe38094d0`](https://github.com/dfinity/ic/commit/fe38094d0) Node: Update Base Image Refs [2026-09-03-0806] ([#11426](https://github.com/dfinity/ic/pull/11426))
* [`efcac2e01`](https://github.com/dfinity/ic/commit/efcac2e01) Node(sysimage): use itertools.batched now that toolchain is on Python 3.12 ([#11475](https://github.com/dfinity/ic/pull/11475))
* [`feec8dfea`](https://github.com/dfinity/ic/commit/feec8dfea) Node: One more pass at guest_disk simplification ([#11394](https://github.com/dfinity/ic/pull/11394))
* [`288ea2b2d`](https://github.com/dfinity/ic/commit/288ea2b2d) Node: Update Base Image Refs [2026-09-03-0139] ([#11424](https://github.com/dfinity/ic/pull/11424))
## Refactoring:
## Tests:
## Documentation:
Full list of changes (including the ones that are not relevant to GuestOS) can be found on [GitHub](https://github.com/dfinity/dre/blob/9931c2a50571f2a3f32177e06bec0d671ca36758/replica-releases/dea4a9afe8bb2a6c324eb661e52204c6054d8e91.md).

# IC-OS Verification

To build and verify the IC-OS GuestOS disk image, after installing curl if necessary (`sudo apt install curl`), run:

```
# From https://github.com/dfinity/ic#verifying-releases
curl -fsSL https://raw.githubusercontent.com/dfinity/ic/dea4a9afe8bb2a6c324eb661e52204c6054d8e91/ci/scripts/repro-check | python3 - -c dea4a9afe8bb2a6c324eb661e52204c6054d8e91 --guestos
```

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.

While not required for this NNS proposal, as we are only electing a new GuestOS version here, you have the option to verify the build reproducibility of the HostOS by passing `--hostos` to the script above instead of `--guestos`, or the SetupOS by passing `--setupos`.
