chore(release): Elect version 1db8f933fdadc81a90e7db2389b081e21263a9b6 as HostOS candidate for rollout (#1677)

Author: sa-github-api

hostos-releases/1db8f933fdadc81a90e7db2389b081e21263a9b6.md

@@ -0,0 +1,101 @@
+Release Notes for [**release-2025-08-14\_03-27-base**](https://github.com/dfinity/ic/tree/release-2025-08-14_03-27-base) (1db8f933fdadc81a90e7db2389b081e21263a9b6)
+===================================================================================================================================================================
+
+This release is based on changes since [release-2025-08-07\_03-33-base](https://dashboard.internetcomputer.org/release/047925dfd8386aca91d154054149727131766084) (047925dfd8386aca91d154054149727131766084).
+
+Please note that some commits may be excluded from this release if they're not relevant, or not modifying the HostOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.
+
+To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2025-08-07_03-33-base...release-2025-08-14_03-27-base).
+
+Features:
+---------
+
+* [`1905e1dd8`](https://github.com/dfinity/ic/commit/1905e1dd8) Interface,Node: Move disk encryption logic to Rust and support SEV-based disk encryption ([#6170](https://github.com/dfinity/ic/pull/6170))
+
+Chores:
+-------
+
+* [`7f8ccf7b3`](https://github.com/dfinity/ic/commit/7f8ccf7b3) Interface,Node: HostOS SEV improvements ([#6249](https://github.com/dfinity/ic/pull/6249))
+* [`746c05b97`](https://github.com/dfinity/ic/commit/746c05b97) Owners: upgrade autocfg to 1.5.0 to fix reproducibility ([#6236](https://github.com/dfinity/ic/pull/6236))
+* [`fde21389b`](https://github.com/dfinity/ic/commit/fde21389b) Node: removing all mentions of filebeat and log pushing configuration and generation ([#6153](https://github.com/dfinity/ic/pull/6153))
+* [`f718b7dbf`](https://github.com/dfinity/ic/commit/f718b7dbf) Node: Update Base Image Refs [2025-08-07-0804] ([#6176](https://github.com/dfinity/ic/pull/6176))
+
+------------------------------------------
+
+## Excluded Changes
+
+### Excluded by authors
+* [`bd1393d54`](https://github.com/dfinity/ic/commit/bd1393d54) Execution,Interface: Add snapshot source to canister history ([#6163](https://github.com/dfinity/ic/pull/6163))
+* [`5125d5e8b`](https://github.com/dfinity/ic/commit/5125d5e8b) Execution,Interface: Implement pre-signature stash behind a feature flag ([#6179](https://github.com/dfinity/ic/pull/6179))
+* [`f30890a84`](https://github.com/dfinity/ic/commit/f30890a84) Execution,Interface: Extend canister status endpoint ([#6144](https://github.com/dfinity/ic/pull/6144))
+* [`84538856c`](https://github.com/dfinity/ic/commit/84538856c) Interface: Add SEV measurements to ReplicaVersionRecord ([#5966](https://github.com/dfinity/ic/pull/5966))
+* [`552295bb4`](https://github.com/dfinity/ic/commit/552295bb4) Consensus,Interface: Re-combine peer and user ingress channels ([#5908](https://github.com/dfinity/ic/pull/5908))
+* [`09a91114e`](https://github.com/dfinity/ic/commit/09a91114e) Crypto,Interface,Message Routing: Extra helper functions for hash trees ([#6182](https://github.com/dfinity/ic/pull/6182))
+* [`4611dc7ad`](https://github.com/dfinity/ic/commit/4611dc7ad) Execution,Interface: Upgrade Wasmtime 35 ([#6100](https://github.com/dfinity/ic/pull/6100))
+* [`a417ed6be`](https://github.com/dfinity/ic/commit/a417ed6be) Owners: don't use separate lockfile for fuzzers ([#6184](https://github.com/dfinity/ic/pull/6184))
+* [`3fc9c04dd`](https://github.com/dfinity/ic/commit/3fc9c04dd) Consensus,Interface: Remove ThresholdSigInputsRef ([#6157](https://github.com/dfinity/ic/pull/6157))
+
+### Not modifying HostOS
+* [`da40cb4ea`](https://github.com/dfinity/ic/commit/da40cb4ea) Crypto: Add support for subkey derivation to ic-ed25519 and ic-secp256k1 ([#6173](https://github.com/dfinity/ic/pull/6173))
+* [`b66c27072`](https://github.com/dfinity/ic/commit/b66c27072) Interface(PocketIC): bootstrap cycles ledger and index canisters ([#6218](https://github.com/dfinity/ic/pull/6218))
+* [`46eacff4c`](https://github.com/dfinity/ic/commit/46eacff4c) Interface(sns): Validate treasury limits before treasury manager deposit operation ([#6245](https://github.com/dfinity/ic/pull/6245))
+* [`2040bda39`](https://github.com/dfinity/ic/commit/2040bda39) Interface(icp-rosetta): () add icp rosetta release 2.1.7 ([#6229](https://github.com/dfinity/ic/pull/6229))
+* [`87a82999f`](https://github.com/dfinity/ic/commit/87a82999f) Interface(ICP-Rosetta): adding disburse maturity endpoint ([#5994](https://github.com/dfinity/ic/pull/5994))
+* [`9c44736ed`](https://github.com/dfinity/ic/commit/9c44736ed) Interface(ICRC\_Rosetta): Add ICRC Rosetta release 1.2.5 ([#6211](https://github.com/dfinity/ic/pull/6211))
+* [`388980813`](https://github.com/dfinity/ic/commit/388980813) Interface(ledgers): fix the generic message, add FieldsDisplay ([#5563](https://github.com/dfinity/ic/pull/5563))
+* [`f13aff703`](https://github.com/dfinity/ic/commit/f13aff703) Interface(sns): Add withdraw operation with validation and rendering ([#6174](https://github.com/dfinity/ic/pull/6174))
+* [`70310a5fb`](https://github.com/dfinity/ic/commit/70310a5fb) Interface(ICP-Ledger): Implement endpoint to reset legacy approvals ([#6121](https://github.com/dfinity/ic/pull/6121))
+* [`661c17a9a`](https://github.com/dfinity/ic/commit/661c17a9a) Interface(cycles-minting): Allow Subnet Rental canister to tell Cycles Minting canister, "principal P is allowed to create canisters on subnet N". ([#5652](https://github.com/dfinity/ic/pull/5652))
+* [`aec00cd6b`](https://github.com/dfinity/ic/commit/aec00cd6b) Interface(ICP-Ledger): Allow legacy transfer to burn less than fee if it is the entire balance ([#6138](https://github.com/dfinity/ic/pull/6138))
+* [`6290490f9`](https://github.com/dfinity/ic/commit/6290490f9) Interface,Message Routing: Parallel traversal of files in finalize\_checkpoint ([#6185](https://github.com/dfinity/ic/pull/6185))
+* [`db0a76b9b`](https://github.com/dfinity/ic/commit/db0a76b9b) Owners: print node name in Build IC ([#6242](https://github.com/dfinity/ic/pull/6242))
+* [`66877f03b`](https://github.com/dfinity/ic/commit/66877f03b) Consensus,Interface: temporarily disable downloading launch measurements in tests ([#6204](https://github.com/dfinity/ic/pull/6204))
+* [`705ab6ab7`](https://github.com/dfinity/ic/commit/705ab6ab7) Consensus,Interface(orchestrator): Gracefully stop orchestrator tasks during replica upgrades ([#5898](https://github.com/dfinity/ic/pull/5898))
+* [`358c24213`](https://github.com/dfinity/ic/commit/358c24213) Consensus,Interface: use /api/v2/subnet/<subnet\_id>/read\_state instead of /api/v2/canister/<effective\_canister\_id>/read\_state when fetching nns delegation ([#6178](https://github.com/dfinity/ic/pull/6178))
+* [`1db8f933f`](https://github.com/dfinity/ic/commit/1db8f933f) Interface(ckbtc): prevent signing transaction with too many inputs ([#6260](https://github.com/dfinity/ic/pull/6260))
+* [`fe9863560`](https://github.com/dfinity/ic/commit/fe9863560) Interface(NRC): Fix rewardable nodes computation ([#6225](https://github.com/dfinity/ic/pull/6225))
+* [`71b0383f8`](https://github.com/dfinity/ic/commit/71b0383f8) Interface(sns): Fix an issue where neuron topic follower index is updated incorrectly ([#6221](https://github.com/dfinity/ic/pull/6221))
+* [`05530871f`](https://github.com/dfinity/ic/commit/05530871f) Interface(NRC): Small fixes ([#6156](https://github.com/dfinity/ic/pull/6156))
+* [`4ff834047`](https://github.com/dfinity/ic/commit/4ff834047) Interface,Node: Fix broken nested tests ([#6202](https://github.com/dfinity/ic/pull/6202))
+* [`8013374b6`](https://github.com/dfinity/ic/commit/8013374b6) Owners(IDX): update license links ([#6175](https://github.com/dfinity/ic/pull/6175))
+* [`8a9e16366`](https://github.com/dfinity/ic/commit/8a9e16366) Consensus,Interface: Remove anyhow from P2P code ([#6244](https://github.com/dfinity/ic/pull/6244))
+* [`09571b845`](https://github.com/dfinity/ic/commit/09571b845) Consensus,Interface: Rename TestSigInputs ([#6252](https://github.com/dfinity/ic/pull/6252))
+* [`34f9ec20d`](https://github.com/dfinity/ic/commit/34f9ec20d) Consensus,Interface: print the raw response when we fail to decode the read state response from the NNS ([#6246](https://github.com/dfinity/ic/pull/6246))
+* [`da30c0d38`](https://github.com/dfinity/ic/commit/da30c0d38) Consensus,Interface: drop unused logs ([#6233](https://github.com/dfinity/ic/pull/6233))
+* [`fc211c4dd`](https://github.com/dfinity/ic/commit/fc211c4dd) Consensus,Interface: inline dependencies in canister\_client crates ([#6209](https://github.com/dfinity/ic/pull/6209))
+* [`c3e3ae522`](https://github.com/dfinity/ic/commit/c3e3ae522) Consensus,Interface: Tidy up tests to consolidate code ([#6187](https://github.com/dfinity/ic/pull/6187))
+* [`f886fd9f0`](https://github.com/dfinity/ic/commit/f886fd9f0) Consensus,Interface: inline dependencies in backup crates ([#6189](https://github.com/dfinity/ic/pull/6189))
+* [`39c358e8a`](https://github.com/dfinity/ic/commit/39c358e8a) Consensus,Interface: Use the full pre-signature to determine "oldest registry version in use" ([#6166](https://github.com/dfinity/ic/pull/6166))
+* [`65bb95e42`](https://github.com/dfinity/ic/commit/65bb95e42) Consensus,Interface: Report IDKG transcript resolution errors occurring during batch delivery ([#6135](https://github.com/dfinity/ic/pull/6135))
+* [`06071e7d8`](https://github.com/dfinity/ic/commit/06071e7d8) Crypto,Interface: Remove unused dependency on ic-test-utilities ([#6194](https://github.com/dfinity/ic/pull/6194))
+* [`3f7bba9a9`](https://github.com/dfinity/ic/commit/3f7bba9a9) Execution,Interface,Message Routing(EXC): Remove unused call\_responded method on CallContextManager ([#6092](https://github.com/dfinity/ic/pull/6092))
+* [`cddf2f8a9`](https://github.com/dfinity/ic/commit/cddf2f8a9) Interface(ICRC\_Ledger): Clean up migration code ([#5627](https://github.com/dfinity/ic/pull/5627))
+* [`9bceb4497`](https://github.com/dfinity/ic/commit/9bceb4497) Interface(cross-chain): use evm\_rpc\_types v2.0.0 ([#6238](https://github.com/dfinity/ic/pull/6238))
+* [`e78031654`](https://github.com/dfinity/ic/commit/e78031654) Interface: Organize IC image test env interface ([#6230](https://github.com/dfinity/ic/pull/6230))
+* [`496c20d68`](https://github.com/dfinity/ic/commit/496c20d68) Interface: Add missing Cargo files to workspace ([#6201](https://github.com/dfinity/ic/pull/6201))
+* [`2ee6ac954`](https://github.com/dfinity/ic/commit/2ee6ac954) Interface(Ledgers): format did files with default formatter ([#6235](https://github.com/dfinity/ic/pull/6235))
+* [`78f009705`](https://github.com/dfinity/ic/commit/78f009705) Interface(Ledgers): Load WASMs using env vars ([#6195](https://github.com/dfinity/ic/pull/6195))
+* [`510da65de`](https://github.com/dfinity/ic/commit/510da65de) Interface: remove kubeconfig extension ([#6196](https://github.com/dfinity/ic/pull/6196))
+* [`995bf2b20`](https://github.com/dfinity/ic/commit/995bf2b20) Interface: inline dependencies in boundary\_node crates ([#6192](https://github.com/dfinity/ic/pull/6192))
+* [`853d5f2b6`](https://github.com/dfinity/ic/commit/853d5f2b6) Interface: Add types to utils ([#6186](https://github.com/dfinity/ic/pull/6186))
+* [`6045144d8`](https://github.com/dfinity/ic/commit/6045144d8) Interface(Ledgers): Remove unused dependencies ([#6193](https://github.com/dfinity/ic/pull/6193))
+* [`145df0db2`](https://github.com/dfinity/ic/commit/145df0db2) Interface: Cleanup HasIcDependencies trait ([#6075](https://github.com/dfinity/ic/pull/6075))
+* [`4d9bf0df8`](https://github.com/dfinity/ic/commit/4d9bf0df8) Interface: track NNS frontend dapp and SNS aggregator as external mainnet canisters in the bazel workspace ([#6142](https://github.com/dfinity/ic/pull/6142))
+* [`4e850b9e5`](https://github.com/dfinity/ic/commit/4e850b9e5) Owners: inline the bazel-test-all action into the bazel-test-all job ([#6258](https://github.com/dfinity/ic/pull/6258))
+* [`e37cc67c6`](https://github.com/dfinity/ic/commit/e37cc67c6) Owners: drop docker-bin ([#6215](https://github.com/dfinity/ic/pull/6215))
+* [`b679198e1`](https://github.com/dfinity/ic/commit/b679198e1) Owners: clean up container build scripts ([#6210](https://github.com/dfinity/ic/pull/6210))
+* [`241cb2b37`](https://github.com/dfinity/ic/commit/241cb2b37) Owners: remove build container entrypoint ([#6198](https://github.com/dfinity/ic/pull/6198))
+* [`ba7f74d24`](https://github.com/dfinity/ic/commit/ba7f74d24) Owners: Update Mainnet IC revisions canisters file ([#6228](https://github.com/dfinity/ic/pull/6228))
+* [`f3216953a`](https://github.com/dfinity/ic/commit/f3216953a) Owners: Update Mainnet IC revisions canisters file ([#6213](https://github.com/dfinity/ic/pull/6213))
+* [`1abed28ca`](https://github.com/dfinity/ic/commit/1abed28ca) Owners: Update Mainnet ICOS revisions file ([#6212](https://github.com/dfinity/ic/pull/6212))
+* [`fa049f8b1`](https://github.com/dfinity/ic/commit/fa049f8b1) Owners: Update Mainnet ICOS revisions file ([#6208](https://github.com/dfinity/ic/pull/6208))
+* [`e9afd38a4`](https://github.com/dfinity/ic/commit/e9afd38a4) Owners(canlog): remove dependency on ic\_cdk ([#6222](https://github.com/dfinity/ic/pull/6222))
+* [`03ee0138a`](https://github.com/dfinity/ic/commit/03ee0138a) Node: guestos-recovery-engine permission setting ([#6129](https://github.com/dfinity/ic/pull/6129))
+* [`8038aa8df`](https://github.com/dfinity/ic/commit/8038aa8df) Interface(ICRC\_Ledger): Remove sunset ICVC SNS from golden state test ([#6251](https://github.com/dfinity/ic/pull/6251))
+* [`a8a1a5d94`](https://github.com/dfinity/ic/commit/a8a1a5d94) Interface(node): use dev latest-setupOS and upgrade images ([#6237](https://github.com/dfinity/ic/pull/6237))
+* [`4a2baf0fb`](https://github.com/dfinity/ic/commit/4a2baf0fb) Interface,Message Routing: rejoin\_test\_large\_state should fetch multiple GiB of chunks during state sync ([#6188](https://github.com/dfinity/ic/pull/6188))
+* [`2bafba9f6`](https://github.com/dfinity/ic/commit/2bafba9f6) Interface,Node(node): NNS recovery test extension ([#6191](https://github.com/dfinity/ic/pull/6191))
+* [`1d53767ab`](https://github.com/dfinity/ic/commit/1d53767ab) Interface,Node(node): Scaffold initial structure for E2E NNS recovery test ([#6168](https://github.com/dfinity/ic/pull/6168))
+* [`a191a3657`](https://github.com/dfinity/ic/commit/a191a3657) Node: Bump setupOS disk\_img\_size\_check ([#6177](https://github.com/dfinity/ic/pull/6177))
+* [`3f142da54`](https://github.com/dfinity/ic/commit/3f142da54) Interface: () Cleanup docs on building the rosetta image ([#6227](https://github.com/dfinity/ic/pull/6227))
+* [`55ec0283b`](https://github.com/dfinity/ic/commit/55ec0283b) Interface: update ic0 to v1.0.0. ([#6216](https://github.com/dfinity/ic/pull/6216))