Voting is open for a new IC release - 2694487

Hello there!

We are happy to announce that voting is now open for a new IC release.
The NNS proposal is here: IC NNS Proposal 119318 .

Here is a summary of the changes since the last release:

  • [7bf4cffbf] Consensus: chore: remove bless and retire replica versions proposals
  • [10bbfb85b] Consensus: chore: Split of utils
  • [a3ada5473] Crypto: chore: Change usages of NodePublicKeyDataError to CspPublicKeyStoreError
  • [e41f97f20] Crypto: chore: Remove obsolete TODO
  • [f4286a4f2] Crypto: chore: add a recursion limit for LabeledTree::TryFrom:: and prune_witness
  • [b57b05ee7] Message Routing: feature: Explicit StateMachine to verify correctness of messages to TipHandler
  • [9ea784563] Networking: chore: Move http endpoint constants to config file
  • [4f63c8a8d] Networking: chore: small cleanup in the replica crate
  • [baab0ae8b] Networking: fix: instead of a start method + thread pool + condvar, use a dedicated thread + bounded channel for sending adverts
  • [dac024cea] Networking: fix: make the local store path required in the IC config
  • [d0f677d4c] Networking: update the code owners of rs/interfaces/src/artifact_manager
  • [74ed42707] Runtime: Composite query: Disallow some syscalls from non-replicated reply + reject callbacks
  • [5f875bb10] Runtime: Disable address map generation in Wasmtime
  • [1d3f72a5d] Runtime: Introduce CanisterSettingsArgsBuilder
  • [e553baffc] Runtime: Trim IPC buffers of idle sandbox processes
  • [d44640bae] Runtime: Use CountBytes trait in LruCache
  • [c97b691c3] Runtime: Use LRU cache for Wasm code
  • [7fdd1129c] Runtime: Use LruCache for query caching
  • [8b20fb310] Runtime: Validate method earlier
  • Various tech-debt management: code refactoring, docs, bug fixes, test updates

IC-OS Verification

To build and verify the IC-OS disk image, run:

# From
# This process requires Mac/Linux/WSL2, Git and Podman on your machine.
git clone
cd ic
git fetch origin
git checkout 2694487bb5594f68b43e1dc795142a8e48b45715
if ./gitlab-ci/container/ -i ; then
    curl -LO
    shasum -a 256 artifacts/icos/guestos/update-img.tar.gz update-img.tar.gz
    echo "IC-OS build failed. Verification unsuccessful." >&2

The two SHA256 sums printed above from a) the downloaded CDN image and b) the locally built image, must be identical, and must match the SHA256 from the payload of the NNS proposal.


@pietrodimarco Welcome!

I am a community member who is attempting to reproduce the builds as well as review the release notes.

A couple of overall suggestions:
(a) You might want to be more specific in context of what we actually voting for. Specifically we are voting for an update to the guestos. In that context, we are NOT verifying IC-OS as a whole.
(b) Secondly and correspondingly, there is NO IC-OS disk image. There is IC-OS guestos disk image.

Now on to release notes,

  1. I have a few questions; based on my findings (which are only related to RunTime for now). How should these be asked? Should I ask them here tagging individual dev? Create an issue in git?

  2. How we verify whether " Various tech-debt management: code refactoring, docs, bug fixes, test updates" have taken place or not?

The summary of my review notes are attached.


Reviewers for the CodeGov project have completed our review of this proposal 119318, which can be found in the CodeGov portal on DSCVR. The CodeGov neuron has voted to adopt this proposal. The Synapse neuron and Arthur’s neuron have both voted to adopt this proposal as well.