chore(release): Elect version 606cab75d9840e2e1c5ef1ce734a7e6a4f754f0b as HostOS candidate for rollout (#1963)

Author: sa-github-api

hostos-releases/606cab75d9840e2e1c5ef1ce734a7e6a4f754f0b.md

@@ -0,0 +1,136 @@
+Release Notes for [**release-2026-04-02\_04-48-base**](https://github.com/dfinity/ic/tree/release-2026-04-02_04-48-base) (606cab75d9840e2e1c5ef1ce734a7e6a4f754f0b)
+===================================================================================================================================================================
+
+This release is based on changes since [release-2026-03-26\_04-51-base](https://dashboard.internetcomputer.org/release/17d483c60a09b393ad82a2091b68a242ac69c72d) (17d483c60a09b393ad82a2091b68a242ac69c72d).
+
+Please note that some commits may be excluded from this release if they're not relevant, or not modifying the HostOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.
+
+To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-03-26_04-51-base...release-2026-04-02_04-48-base).
+
+Features:
+---------
+
+* [`8f8410670`](https://github.com/dfinity/ic/commit/8f8410670) Node: Support turin and genoa processors ([#9671](https://github.com/dfinity/ic/pull/9671))
+
+Chores:
+-------
+
+* [`7c6de087f`](https://github.com/dfinity/ic/commit/7c6de087f) Node: Update Base Image Refs [2026-03-26-0816] ([#9594](https://github.com/dfinity/ic/pull/9594))
+
+Tests:
+------
+
+* [`5b0c8e21a`](https://github.com/dfinity/ic/commit/5b0c8e21a) Node: Add SEV recovery system test ([#9568](https://github.com/dfinity/ic/pull/9568))
+
+------------------------------------------
+
+## Excluded Changes
+
+### Excluded by authors
+* [`fd2b851a7`](https://github.com/dfinity/ic/commit/fd2b851a7) Consensus(delegations): make cloud engine nodes use API BNs to fetch delegations ([#9595](https://github.com/dfinity/ic/pull/9595))
+* [`ab9895dbb`](https://github.com/dfinity/ic/commit/ab9895dbb) Consensus(flexible-outcalls): prepare CanisterHttpPayload for flexible errors ([#9681](https://github.com/dfinity/ic/pull/9681))
+* [`ca2901f2d`](https://github.com/dfinity/ic/commit/ca2901f2d) Consensus(flexible-outcalls): add content size to CanisterHttpResponseMetadata ([#9673](https://github.com/dfinity/ic/pull/9673))
+* [`b5fd2677f`](https://github.com/dfinity/ic/commit/b5fd2677f) Consensus(http-outcalls): disregard reject responses when building payload for flexible outcall ([#9572](https://github.com/dfinity/ic/pull/9572))
+* [`b1c706501`](https://github.com/dfinity/ic/commit/b1c706501) Consensus,Interface: Add user attributes to HttpCanisterUpdate and SignedIngressContent ([#9582](https://github.com/dfinity/ic/pull/9582))
+* [`63abe2bbf`](https://github.com/dfinity/ic/commit/63abe2bbf) Interface: Add user attributes to query calls ([#9627](https://github.com/dfinity/ic/pull/9627))
+* [`623583845`](https://github.com/dfinity/ic/commit/623583845) Interface: support updating subnet resource limits ([#9577](https://github.com/dfinity/ic/pull/9577))
+* [`8c86d3585`](https://github.com/dfinity/ic/commit/8c86d3585) Consensus(flexible-outcalls): estimate candidate size correctly ([#9658](https://github.com/dfinity/ic/pull/9658))
+* [`acc0bb5a5`](https://github.com/dfinity/ic/commit/acc0bb5a5) Consensus: Reject chain-key payloads with duplicate agreements ([#9628](https://github.com/dfinity/ic/pull/9628))
+* [`a841c55bc`](https://github.com/dfinity/ic/commit/a841c55bc) Node: deflake //rs/tests/nested/nns\_recovery:nr\_broken\_dfinity\_node\_head\_nns ([#9669](https://github.com/dfinity/ic/pull/9669))
+* [`d7644c6ae`](https://github.com/dfinity/ic/commit/d7644c6ae) DSM: persist next\_idx over checkpoint for LogMemoryStore ([#9309](https://github.com/dfinity/ic/pull/9309))
+* [`c0cf74672`](https://github.com/dfinity/ic/commit/c0cf74672) DSM: Avoid unnecessary Arc::make\_mut() in flush\_checkpoint\_ops\_and\_page\_maps() ([#9136](https://github.com/dfinity/ic/pull/9136))
+* [`bba0dc88d`](https://github.com/dfinity/ic/commit/bba0dc88d) Consensus: Cleanup IDKG signature builder ([#9524](https://github.com/dfinity/ic/pull/9524))
+* [`6eece58b1`](https://github.com/dfinity/ic/commit/6eece58b1) Interface: add SenderInfo to Ingress ([#9651](https://github.com/dfinity/ic/pull/9651))
+* [`3ca3084e9`](https://github.com/dfinity/ic/commit/3ca3084e9) Interface: Avoid cloning when hashing user messages ([#9583](https://github.com/dfinity/ic/pull/9583))
+* [`a0b270cae`](https://github.com/dfinity/ic/commit/a0b270cae) DSM: Clean up task\_queue\_compatibility\_test, part 2 ([#9641](https://github.com/dfinity/ic/pull/9641))
+* [`363731978`](https://github.com/dfinity/ic/commit/363731978) Consensus: Move tECDSA/tSchnorr signatures to batch payload ([#9481](https://github.com/dfinity/ic/pull/9481))
+* [`f33ac32ec`](https://github.com/dfinity/ic/commit/f33ac32ec) Interface: rename sender\_info types ([#9636](https://github.com/dfinity/ic/pull/9636))
+* [`52e7b8937`](https://github.com/dfinity/ic/commit/52e7b8937) DSM: CanisterManagerResponse to be returned from CanisterManager::stop\_canister ([#9654](https://github.com/dfinity/ic/pull/9654))
+* [`04e47830f`](https://github.com/dfinity/ic/commit/04e47830f) DSM: Define ReplicatedState::get\_own\_subnet\_size() ([#9666](https://github.com/dfinity/ic/pull/9666))
+* [`b68e839bf`](https://github.com/dfinity/ic/commit/b68e839bf) DSM: Harden the code around consumed cycles in system api ([#9656](https://github.com/dfinity/ic/pull/9656))
+* [`1c98ccbec`](https://github.com/dfinity/ic/commit/1c98ccbec) DSM: Don't strip page deltas when checkpointing ([#9606](https://github.com/dfinity/ic/pull/9606))
+* [`9f2501ffb`](https://github.com/dfinity/ic/commit/9f2501ffb) DSM: Simplify truncation of PageMap-backing storage ([#9597](https://github.com/dfinity/ic/pull/9597))
+* [`ebc09277d`](https://github.com/dfinity/ic/commit/ebc09277d) DSM: Introduce new type CompoundCycles ([#9520](https://github.com/dfinity/ic/pull/9520))
+* [`94bed9c64`](https://github.com/dfinity/ic/commit/94bed9c64) DSM: introduce CanisterManagerResponse type ([#9567](https://github.com/dfinity/ic/pull/9567))
+* [`b7d3ac201`](https://github.com/dfinity/ic/commit/b7d3ac201) Node: Add playnet domain and TLS certificate support for API Boundary Nodes ([#9613](https://github.com/dfinity/ic/pull/9613))
+
+### Not modifying HostOS
+* [`142c7c25a`](https://github.com/dfinity/ic/commit/142c7c25a) Consensus(flexible-outcalls): add metric for candid encoding/decoding failures ([#9643](https://github.com/dfinity/ic/pull/9643))
+* [`78bfafc57`](https://github.com/dfinity/ic/commit/78bfafc57) Consensus(flexible-outcalls): deliver flexible ok-responses to execution ([#9564](https://github.com/dfinity/ic/pull/9564))
+* [`eac17ee49`](https://github.com/dfinity/ic/commit/eac17ee49) Consensus(test-driver): introduce JournalStreamer in system tests ([#9571](https://github.com/dfinity/ic/pull/9571))
+* [`02727ce72`](https://github.com/dfinity/ic/commit/02727ce72) DRE: introduce IC\_GW\_IPV4 for cloud\_engine ([#9695](https://github.com/dfinity/ic/pull/9695))
+* [`efff780b7`](https://github.com/dfinity/ic/commit/efff780b7) Governance: support resource limits in ic-admin for subnet creation ([#9616](https://github.com/dfinity/ic/pull/9616))
+* [`2d3386024`](https://github.com/dfinity/ic/commit/2d3386024) Governance: Mission 70 voting rewards. ([#9686](https://github.com/dfinity/ic/pull/9686))
+* [`c8a95198e`](https://github.com/dfinity/ic/commit/c8a95198e) Governance: Proposal for subnet deletion ([#9407](https://github.com/dfinity/ic/pull/9407))
+* [`077cec5e8`](https://github.com/dfinity/ic/commit/077cec5e8) Governance(nns): tag 8-year gang bonus base for neurons with max dissolve delay ([#9593](https://github.com/dfinity/ic/pull/9593))
+* [`ceb03dec0`](https://github.com/dfinity/ic/commit/ceb03dec0) Owners: add cloud\_engine testnet type ([#9635](https://github.com/dfinity/ic/pull/9635))
+* [`7468e1d3e`](https://github.com/dfinity/ic/commit/7468e1d3e) IDX: upload apple silicon binaries ([#9703](https://github.com/dfinity/ic/pull/9703))
+* [`fe80d2499`](https://github.com/dfinity/ic/commit/fe80d2499) Node: Add sev\_baremetal\_app\_subnet dynamic testnet (SEV bare metal + single-node app subnet) ([#9677](https://github.com/dfinity/ic/pull/9677))
+* [`c6a37193d`](https://github.com/dfinity/ic/commit/c6a37193d) DSM: Don't schedule heartbeats without enough cycles ([#9679](https://github.com/dfinity/ic/pull/9679))
+* [`1fe4b3362`](https://github.com/dfinity/ic/commit/1fe4b3362) DSM(PocketIC): disable ingress validation if specified ([#9633](https://github.com/dfinity/ic/pull/9633))
+* [`83c3f95e8`](https://github.com/dfinity/ic/commit/83c3f95e8) DSM: Support id.ai.localhost alias for PocketIC version of II frontend ([#9639](https://github.com/dfinity/ic/pull/9639))
+* [`12d17dfd6`](https://github.com/dfinity/ic/commit/12d17dfd6) DSM: Engine deletion ([#9031](https://github.com/dfinity/ic/pull/9031))
+* [`33077fec7`](https://github.com/dfinity/ic/commit/33077fec7) Consensus: return 202 upon unknown message status in sync call HTTP handler ([#9691](https://github.com/dfinity/ic/pull/9691))
+* [`d5a1694a6`](https://github.com/dfinity/ic/commit/d5a1694a6) Consensus: deflake //rs/tests/consensus/subnet\_recovery:sr\_app\_no\_upgrade\_with\_chain\_keys\_test\_head\_nns\_colocate ([#9701](https://github.com/dfinity/ic/pull/9701))
+* [`5407984a3`](https://github.com/dfinity/ic/commit/5407984a3) Consensus: deflake //rs/tests/consensus:replica\_determinism\_test by retrying on transport errors ([#9405](https://github.com/dfinity/ic/pull/9405))
+* [`c514de36a`](https://github.com/dfinity/ic/commit/c514de36a) Consensus: deflake //rs/tests/consensus:replica\_determinism\_test by allowing 3 replica restarts ([#9646](https://github.com/dfinity/ic/pull/9646))
+* [`ccfb61f60`](https://github.com/dfinity/ic/commit/ccfb61f60) Consensus,Node: deflake //rs/tests/nested/nns\_recovery:... by doubling vCPUs ([#9588](https://github.com/dfinity/ic/pull/9588))
+* [`a22189c20`](https://github.com/dfinity/ic/commit/a22189c20) Defi(ckbtc): prevent double-mint of cached UTXOs after transaction finalization ([#9596](https://github.com/dfinity/ic/pull/9596))
+* [`f1a18c56d`](https://github.com/dfinity/ic/commit/f1a18c56d) Defi: deflake //rs/ledger\_suite/icp:ledger\_canister\_integration\_test\_tests/tests\_test ([#9645](https://github.com/dfinity/ic/pull/9645))
+* [`b6bfa19ae`](https://github.com/dfinity/ic/commit/b6bfa19ae) Defi: deflake //rs/bitcoin/adapter:adapter\_integration\_test ([#9629](https://github.com/dfinity/ic/pull/9629))
+* [`5e380a880`](https://github.com/dfinity/ic/commit/5e380a880) Defi: deflake //rs/tests/financial\_integrations/rosetta:rosetta\_neuron\_follow\_test ([#9631](https://github.com/dfinity/ic/pull/9631))
+* [`78787207e`](https://github.com/dfinity/ic/commit/78787207e) IDX: update release-testing permissions ([#9663](https://github.com/dfinity/ic/pull/9663))
+* [`c17e71ee1`](https://github.com/dfinity/ic/commit/c17e71ee1) IDX: fix actions permissions ([#9661](https://github.com/dfinity/ic/pull/9661))
+* [`7052800c2`](https://github.com/dfinity/ic/commit/7052800c2) IDX: add permission: actions: write to ci-main ([#9634](https://github.com/dfinity/ic/pull/9634))
+* [`9374bcbe2`](https://github.com/dfinity/ic/commit/9374bcbe2) IDX: use local config values when inferring bazel targets ([#9626](https://github.com/dfinity/ic/pull/9626))
+* [`0e1ec5d21`](https://github.com/dfinity/ic/commit/0e1ec5d21) IDX: make build and test targets available ([#9623](https://github.com/dfinity/ic/pull/9623))
+* [`da3b9bd6d`](https://github.com/dfinity/ic/commit/da3b9bd6d) IDX(journal): deflake JournalStreamer searches when JSON output is too large ([#9612](https://github.com/dfinity/ic/pull/9612))
+* [`666611b32`](https://github.com/dfinity/ic/commit/666611b32) IDX: add rsync back ([#9607](https://github.com/dfinity/ic/pull/9607))
+* [`f35c9c137`](https://github.com/dfinity/ic/commit/f35c9c137) IDX: rebuild all targets on docker file changes ([#9608](https://github.com/dfinity/ic/pull/9608))
+* [`3c2ecfd36`](https://github.com/dfinity/ic/commit/3c2ecfd36) IDX,Infrasec(IDX): install protobuf-compiler ([#9657](https://github.com/dfinity/ic/pull/9657))
+* [`37dc21836`](https://github.com/dfinity/ic/commit/37dc21836) Node: deflake //rs/tests/message\_routing:rejoin\_test\_large\_state ([#9536](https://github.com/dfinity/ic/pull/9536))
+* [`2b6ba1c4e`](https://github.com/dfinity/ic/commit/2b6ba1c4e) DSM: Filter ECDSA subnets on engines ([#9685](https://github.com/dfinity/ic/pull/9685))
+* [`c29711917`](https://github.com/dfinity/ic/commit/c29711917) DSM: counts\_toward\_round\_limit in Ic00MethodPermissions ([#9625](https://github.com/dfinity/ic/pull/9625))
+* [`b523c2adb`](https://github.com/dfinity/ic/commit/b523c2adb) DSM: Clarify that assertions are about cycles metrics ([#9618](https://github.com/dfinity/ic/pull/9618))
+* [`8266c241c`](https://github.com/dfinity/ic/commit/8266c241c) DSM: II and NNS dapp init args in PocketIC ([#9614](https://github.com/dfinity/ic/pull/9614))
+* [`60344996b`](https://github.com/dfinity/ic/commit/60344996b) Consensus: Add an async version of await\_pre\_signature\_stash\_size to deflake //rs/tests/consensus/tecdsa:tecdsa\_key\_rotation\_test ([#9680](https://github.com/dfinity/ic/pull/9680))
+* [`a04c112e2`](https://github.com/dfinity/ic/commit/a04c112e2) Consensus: Avoid cloning HTTP outcalls divergences when generating responses ([#9630](https://github.com/dfinity/ic/pull/9630))
+* [`4b8cb611d`](https://github.com/dfinity/ic/commit/4b8cb611d) Consensus(ic-backup): expand error messages and panic on errors in unit tests ([#9655](https://github.com/dfinity/ic/pull/9655))
+* [`b8613a99e`](https://github.com/dfinity/ic/commit/b8613a99e) Consensus(crypto): Extend ic-signature-verification for v3 canister ranges ([#9277](https://github.com/dfinity/ic/pull/9277))
+* [`31d726d72`](https://github.com/dfinity/ic/commit/31d726d72) Defi(ckbtc): upgrade ckBTC minter to unstuck transactions ([#9525](https://github.com/dfinity/ic/pull/9525))
+* [`b8ae4a578`](https://github.com/dfinity/ic/commit/b8ae4a578) Governance: doc comment on nested optional fields in UpdateSubnetPayload ([#9622](https://github.com/dfinity/ic/pull/9622))
+* [`83ef517a0`](https://github.com/dfinity/ic/commit/83ef517a0) Owners: Update Mainnet IC revisions canisters file ([#9705](https://github.com/dfinity/ic/pull/9705))
+* [`243d11d48`](https://github.com/dfinity/ic/commit/243d11d48) Owners: Update Mainnet IC revisions canisters file ([#9665](https://github.com/dfinity/ic/pull/9665))
+* [`9db316cc0`](https://github.com/dfinity/ic/commit/9db316cc0) Owners: Update Mainnet ICOS revisions file ([#9659](https://github.com/dfinity/ic/pull/9659))
+* [`414969cde`](https://github.com/dfinity/ic/commit/414969cde) Owners: Update Mainnet IC revisions canisters file ([#9660](https://github.com/dfinity/ic/pull/9660))
+* [`13a2e684a`](https://github.com/dfinity/ic/commit/13a2e684a) Owners: Update Mainnet IC revisions canisters file ([#9603](https://github.com/dfinity/ic/pull/9603))
+* [`de71c50eb`](https://github.com/dfinity/ic/commit/de71c50eb) IDX: update actions ([#9684](https://github.com/dfinity/ic/pull/9684))
+* [`8c6cc3277`](https://github.com/dfinity/ic/commit/8c6cc3277) IDX: update letsencrypt image ([#9690](https://github.com/dfinity/ic/pull/9690))
+* [`70f56f3fa`](https://github.com/dfinity/ic/commit/70f56f3fa) IDX: upgrade actions to use Node.js 24 ([#9678](https://github.com/dfinity/ic/pull/9678))
+* [`a6824bf53`](https://github.com/dfinity/ic/commit/a6824bf53) IDX: upgrade UVM images to bdb19d4 ([#9670](https://github.com/dfinity/ic/pull/9670))
+* [`4044854bd`](https://github.com/dfinity/ic/commit/4044854bd) IDX: fix-flaky-tests: address only one root cause ([#9648](https://github.com/dfinity/ic/pull/9648))
+* [`0ab05215f`](https://github.com/dfinity/ic/commit/0ab05215f) IDX: split build and test ([#9620](https://github.com/dfinity/ic/pull/9620))
+* [`5ad4a1ab1`](https://github.com/dfinity/ic/commit/5ad4a1ab1) IDX: split out bazel target inference ([#9605](https://github.com/dfinity/ic/pull/9605))
+* [`57ccbe0c2`](https://github.com/dfinity/ic/commit/57ccbe0c2) Node: Cleanup some comments and code around BM ipmi ([#9576](https://github.com/dfinity/ic/pull/9576))
+* [`6b069e772`](https://github.com/dfinity/ic/commit/6b069e772) DSM: ensure no subnet message execution on canister aborted in install code ([#9619](https://github.com/dfinity/ic/pull/9619))
+* [`a67473e2b`](https://github.com/dfinity/ic/commit/a67473e2b) DSM: Drop compute allocation violations metric ([#9664](https://github.com/dfinity/ic/pull/9664))
+* [`1a4a7a898`](https://github.com/dfinity/ic/commit/1a4a7a898) DSM: clean up does\_not\_run\_on\_aborted\_canister in Ic00MethodPermissions ([#9602](https://github.com/dfinity/ic/pull/9602))
+* [`c8cb91ae3`](https://github.com/dfinity/ic/commit/c8cb91ae3) DSM: backward-compatibility of ExtendedSubnetConfigSet in PocketIC ([#9615](https://github.com/dfinity/ic/pull/9615))
+* [`a1c9e6f25`](https://github.com/dfinity/ic/commit/a1c9e6f25) Governance(nns): remove self-describing proposals backfill and feature flag ([#9555](https://github.com/dfinity/ic/pull/9555))
+* [`da9943e08`](https://github.com/dfinity/ic/commit/da9943e08) IDX: remove bazel coverage jobs ([#9599](https://github.com/dfinity/ic/pull/9599))
+* [`208382e33`](https://github.com/dfinity/ic/commit/208382e33) IDX: split package installs by image ([#9578](https://github.com/dfinity/ic/pull/9578))
+* [`606cab75d`](https://github.com/dfinity/ic/commit/606cab75d) DSM: Use CompoundCycles in helpers in ExecutionTest ([#9696](https://github.com/dfinity/ic/pull/9696))
+* [`8a88eb18b`](https://github.com/dfinity/ic/commit/8a88eb18b) DSM: Refactor RoundSchedule ([#9569](https://github.com/dfinity/ic/pull/9569))
+* [`b93b30c75`](https://github.com/dfinity/ic/commit/b93b30c75) DSM: harden ongoing\_long\_install\_code in drain\_subnet\_queues ([#9632](https://github.com/dfinity/ic/pull/9632))
+* [`b2cccf362`](https://github.com/dfinity/ic/commit/b2cccf362) Consensus: introduce subnet splitting v2 system test ([#9101](https://github.com/dfinity/ic/pull/9101))
+* [`675a14c1a`](https://github.com/dfinity/ic/commit/675a14c1a) Defi: move event files to CDN ([#9563](https://github.com/dfinity/ic/pull/9563))
+* [`95bb1f23e`](https://github.com/dfinity/ic/commit/95bb1f23e) IDX: support overriding enp2s0 network configuration for ic-gateway-vms ([#9683](https://github.com/dfinity/ic/pull/9683))
+* [`d4a83a9e3`](https://github.com/dfinity/ic/commit/d4a83a9e3) DSM: Faster pre-signature tests ([#9697](https://github.com/dfinity/ic/pull/9697))
+* [`0040ee485`](https://github.com/dfinity/ic/commit/0040ee485) DSM: enforce cloud engine invariants by default in system tests ([#9609](https://github.com/dfinity/ic/pull/9609))
+* [`e4982bf7e`](https://github.com/dfinity/ic/commit/e4982bf7e) DSM: systest for subnet resource limits ([#9617](https://github.com/dfinity/ic/pull/9617))
+* [`932bbf1ae`](https://github.com/dfinity/ic/commit/932bbf1ae) DSM: harden and simplify dts\_aborted\_execution\_does\_not\_block\_subnet\_messages ([#9640](https://github.com/dfinity/ic/pull/9640))
+
+### The change is not owned by any replica or HostOS team
+* [`e0a18b984`](https://github.com/dfinity/ic/commit/e0a18b984) Governance: Implement do\_split\_subnet endpoint ([#8692](https://github.com/dfinity/ic/pull/8692))
+* [`be84ed74c`](https://github.com/dfinity/ic/commit/be84ed74c) IDX: deduplicate rust lints ([#9600](https://github.com/dfinity/ic/pull/9600))
+* [`c71d0c440`](https://github.com/dfinity/ic/commit/c71d0c440) IDX: remove askama patch ([#9579](https://github.com/dfinity/ic/pull/9579))