We want to thank our vigilant reviewers for catching a bug in our release pipeline.
The PR #5070 refactored the upload code and introduced an issue where -dev variants of the GuestOS images were uploaded to the same path as production artifacts. The problematic hash can be verified to match -dev image by running the following commands:
$ git checkout release-2025-05-15_03-20-base
$ bazel build //ic-os/guestos/envs/dev --config=release
$ sha256 bazel-bin/ic-os/guestos/envs/dev/update-img.tar.zst
Our team is adding automated checks to our release pipelines and manual steps to our release playbook to ensure these issues are caught sooner, and we do not waste the valuable time of our reviewers in the future.