Voting is open for a new IC release - ebb7d6d

Hello there!

we are happy to announce that voting is now open for a new IC release.
The NNS proposal is here: IC NNS Proposal 64355.

There are lots of exciting new features and bugfixes. Here is a more complete list of changes:

* Consensus: Fix replica crash loop
* Consensus: Fix timeout conditions in canister http payload builder
* Consensus: Write changes from canister http changeset to pool in processor
* Execution: Fix metric cycles_consumned_since_replica_started to account for deleted canisters
* Execution: Refactor the BlockChain type to avoid unnecessary unwraps
* Execution: Add `ic_btc_canister::get_current_fee_percentiles()`
* Message Routing: Cleanup: Drop `ENFORCE_MESSAGE_MEMORY_USAGE` flag
* Message Routing: Defragment bitcoin files
* Message Routing: Drop unnecessary `ApiType::clone()`
* Networking: Have a separate tokio runtimes for different networking servers
* Networking: Move out the construction of the IngressIngestionService outside of rs/p2p
* Networking: Move the Sender in a separate module
* Networking: Validate socks proxy config in bitcoin and http adapter
* Node: Enable SELinux enforcing for dev builds
* Orchestrator: Add ic-recovery to GuestOs image
* Runtime/Node: Follow up: mixed workloads
* Runtime: Account for compilation time when installing a Canister
* Runtime: Anonymous query refactor
* Runtime: Make the frame decoder panic on deserialization errors
* Runtime: Non replicated query refactor
* Runtime: Use `-cpu host` for QEMU to enable SSE4.1
* Runtime: Use a portable `copy_file_sparse` on WSL
* Various bug fixes and test updates

And a complete list of changes can of course be found on GitHub.
Please reply to this message if you have any questions or comments.


There is a change on top of the above release that enables the SELinux (!) security on the nodes. This makes the IC code even more secure, since it adds yet another layer of protection against hackers and security vulnerabilities.

Proposal link: 65327

UPDATE: the change is intended to be aplied only on shefu and everything goes well, we’ll soon roll out the change to all subnets.