chore(release): Elect version c7552446d8adacafd4329e1ff2c26d43b3e530a7 as HostOS candidate for rollout (#2013)

Author: sa-github-api

hostos-releases/c7552446d8adacafd4329e1ff2c26d43b3e530a7.md

@@ -0,0 +1,119 @@
+Release Notes for [**release-2026-05-15\_10-22-base**](https://github.com/dfinity/ic/tree/release-2026-05-15_10-22-base) (c7552446d8adacafd4329e1ff2c26d43b3e530a7)
+===================================================================================================================================================================
+
+This release is based on changes since [release-2026-05-07\_04-27-base](https://dashboard.internetcomputer.org/release/62e841d27ea12451f504e74c54843b7cbf93ca4d) (62e841d27ea12451f504e74c54843b7cbf93ca4d).
+
+Please note that some commits may be excluded from this release if they're not relevant, or not modifying the HostOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.
+
+To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-05-07_04-27-base...release-2026-05-15_10-22-base).
+
+Features:
+---------
+
+* [`6ebbb28b2`](https://github.com/dfinity/ic/commit/6ebbb28b2) Node: Update images to 26.04 ([#10176](https://github.com/dfinity/ic/pull/10176))
+* [`adb8f828e`](https://github.com/dfinity/ic/commit/adb8f828e) Node: use prebuilt protoc ([#10164](https://github.com/dfinity/ic/pull/10164))
+* [`a1dd11827`](https://github.com/dfinity/ic/commit/a1dd11827) Node: Update base images to 26.04 ([#10149](https://github.com/dfinity/ic/pull/10149))
+
+Chores:
+-------
+
+* [`6c9d71877`](https://github.com/dfinity/ic/commit/6c9d71877) Node: Update Base Image Refs [2026-05-14-0855] ([#10225](https://github.com/dfinity/ic/pull/10225))
+* [`b96124dae`](https://github.com/dfinity/ic/commit/b96124dae) Node: support allocating testnets to the local DC ([#10122](https://github.com/dfinity/ic/pull/10122))
+* [`36b8b7114`](https://github.com/dfinity/ic/commit/36b8b7114) Node: Update Base Image Refs [2026-05-08-0150] ([#10127](https://github.com/dfinity/ic/pull/10127))
+* [`dfe4dfb0d`](https://github.com/dfinity/ic/commit/dfe4dfb0d) Node: Update Base Image Refs [2026-05-07-0853] ([#10110](https://github.com/dfinity/ic/pull/10110))
+
+------------------------------------------
+
+## Excluded Changes
+
+### Not modifying HostOS
+* [`a4c946ed6`](https://github.com/dfinity/ic/commit/a4c946ed6) core-protocol(PocketIC): canister creation with cycles ([#10206](https://github.com/dfinity/ic/pull/10206))
+* [`3ef433476`](https://github.com/dfinity/ic/commit/3ef433476) core-protocol(crypto): support Ed25519/EdDSA in COSE parser for WebAuthn ([#10081](https://github.com/dfinity/ic/pull/10081))
+* [`74b56726d`](https://github.com/dfinity/ic/commit/74b56726d) core-protocol: Add some DKG metrics & avoid proposing empty IDKG payloads ([#10121](https://github.com/dfinity/ic/pull/10121))
+* [`da257d3d4`](https://github.com/dfinity/ic/commit/da257d3d4) core-protocol(ic-recovery): allow upgrading without blessing + make some steps non-optional ([#10187](https://github.com/dfinity/ic/pull/10187))
+* [`3fb4878f7`](https://github.com/dfinity/ic/commit/3fb4878f7) core-protocol: new mgmt canister types ([#10123](https://github.com/dfinity/ic/pull/10123))
+* [`bb3d2afab`](https://github.com/dfinity/ic/commit/bb3d2afab) Defi(ckdoge-minter): support consent messages ([#10140](https://github.com/dfinity/ic/pull/10140))
+* [`eaa578e69`](https://github.com/dfinity/ic/commit/eaa578e69) Governance(nns): tolerate XRC failures when updating maturity modulation ([#10210](https://github.com/dfinity/ic/pull/10210))
+* [`50ba5020d`](https://github.com/dfinity/ic/commit/50ba5020d) Governance: Move a few tests away from the blessed versions list ([#9729](https://github.com/dfinity/ic/pull/9729))
+* [`e878738de`](https://github.com/dfinity/ic/commit/e878738de) Governance: expose get\_maturity\_modulation query endpoint ([#9879](https://github.com/dfinity/ic/pull/9879))
+* [`b26144ae7`](https://github.com/dfinity/ic/commit/b26144ae7) Governance(nns): expose staked\_maturity\_e8s\_equivalent on NeuronInfo ([#10109](https://github.com/dfinity/ic/pull/10109))
+* [`b614b7d97`](https://github.com/dfinity/ic/commit/b614b7d97) Governance: skip speed limit on first Mission 70 maturity modulation ([#10146](https://github.com/dfinity/ic/pull/10146))
+* [`fa36e548b`](https://github.com/dfinity/ic/commit/fa36e548b) Governance: derive Mission 70 maturity modulation from XRC price history ([#9847](https://github.com/dfinity/ic/pull/9847))
+* [`7ed9b807b`](https://github.com/dfinity/ic/commit/7ed9b807b) IDX: don't carry cargo-audit build artefacts into ic-build ([#10138](https://github.com/dfinity/ic/pull/10138))
+* [`080e7ec77`](https://github.com/dfinity/ic/commit/080e7ec77) Node: Tighten GuestOS target version verification ([#10181](https://github.com/dfinity/ic/pull/10181))
+* [`02c09d9af`](https://github.com/dfinity/ic/commit/02c09d9af) Consensus: colocate mainnet NNS Recovery system test ([#10106](https://github.com/dfinity/ic/pull/10106))
+* [`f1734a2d0`](https://github.com/dfinity/ic/commit/f1734a2d0) core-protocol: links to mgmt canister docs at internetcomputer.org ([#10124](https://github.com/dfinity/ic/pull/10124))
+* [`c728cf201`](https://github.com/dfinity/ic/commit/c728cf201) Defi(ic-metrics-assert): gate doctest behind pocket\_ic feature ([#10204](https://github.com/dfinity/ic/pull/10204))
+* [`e88862486`](https://github.com/dfinity/ic/commit/e88862486) IDX: don't nuke all ic-build image cache ([#10134](https://github.com/dfinity/ic/pull/10134))
+* [`91157bf6b`](https://github.com/dfinity/ic/commit/91157bf6b) IDX: use PR number in concurrency group for nns-team-reminder workflow ([#10125](https://github.com/dfinity/ic/pull/10125))
+* [`c7552446d`](https://github.com/dfinity/ic/commit/c7552446d) Node: specify VM allocation mode for system tests via environment variable ([#10230](https://github.com/dfinity/ic/pull/10230))
+* [`f40bb2818`](https://github.com/dfinity/ic/commit/f40bb2818) Node: Roll forward #10186 ([#10205](https://github.com/dfinity/ic/pull/10205))
+* [`b68257d0b`](https://github.com/dfinity/ic/commit/b68257d0b) Node: revert "fix: Fix some issues in detached LUKS header exchange ([#10179](https://github.com/dfinity/ic/pull/10179))" ([#10186](https://github.com/dfinity/ic/pull/10186))
+* [`b05a07322`](https://github.com/dfinity/ic/commit/b05a07322) Node: fix local NNS Recovery command parsing ([#10184](https://github.com/dfinity/ic/pull/10184))
+* [`cdaafdd94`](https://github.com/dfinity/ic/commit/cdaafdd94) Node: Fix some issues in detached LUKS header exchange ([#10179](https://github.com/dfinity/ic/pull/10179))
+* [`478d3aaa6`](https://github.com/dfinity/ic/commit/478d3aaa6) Node: Fix LUKS keyslot params ([#10170](https://github.com/dfinity/ic/pull/10170))
+* [`861f308ca`](https://github.com/dfinity/ic/commit/861f308ca) Node: forward SSH agent to colocated test driver VM ([#10130](https://github.com/dfinity/ic/pull/10130))
+* [`9d076b3fe`](https://github.com/dfinity/ic/commit/9d076b3fe) core-protocol: inline DSM bazel crate dependencies ([#10191](https://github.com/dfinity/ic/pull/10191))
+* [`8d1a05b01`](https://github.com/dfinity/ic/commit/8d1a05b01) core-protocol: reexport ic\_management\_canister\_types::EnvironmentVariable ([#10221](https://github.com/dfinity/ic/pull/10221))
+* [`fed3cb44a`](https://github.com/dfinity/ic/commit/fed3cb44a) core-protocol: release ic-management-canister-types v0.8.0 ([#10217](https://github.com/dfinity/ic/pull/10217))
+* [`7602e8d91`](https://github.com/dfinity/ic/commit/7602e8d91) core-protocol: Revert "feat: No execution overhead on low cycles ([#10096](https://github.com/dfinity/ic/pull/10096))" ([#10218](https://github.com/dfinity/ic/pull/10218))
+* [`5e2f1db31`](https://github.com/dfinity/ic/commit/5e2f1db31) core-protocol: inline P2P, HTTP endpoints & Monitoring bazel crate dependencies ([#10190](https://github.com/dfinity/ic/pull/10190))
+* [`72a0bdbaa`](https://github.com/dfinity/ic/commit/72a0bdbaa) core-protocol: inline Consensus & Recovery bazel crate dependencies ([#10189](https://github.com/dfinity/ic/pull/10189))
+* [`1aaed7505`](https://github.com/dfinity/ic/commit/1aaed7505) core-protocol: inline Crypto bazel crate dependencies ([#10188](https://github.com/dfinity/ic/pull/10188))
+* [`879a45556`](https://github.com/dfinity/ic/commit/879a45556) core-protocol: Add metric for skipped optimization ([#10132](https://github.com/dfinity/ic/pull/10132))
+* [`eeec0fd29`](https://github.com/dfinity/ic/commit/eeec0fd29) core-protocol: upgrade wirm from 2.1.0 to 4.0.4 ([#10049](https://github.com/dfinity/ic/pull/10049))
+* [`7e7e9c11b`](https://github.com/dfinity/ic/commit/7e7e9c11b) core-protocol: Inline Crypto Bazel dependencies ([#10118](https://github.com/dfinity/ic/pull/10118))
+* [`32b801227`](https://github.com/dfinity/ic/commit/32b801227) core-protocol: Inline Consensus Bazel dependencies ([#10119](https://github.com/dfinity/ic/pull/10119))
+* [`279e55a8f`](https://github.com/dfinity/ic/commit/279e55a8f) core-protocol: Inline State and cert Bazel dependencies ([#10115](https://github.com/dfinity/ic/pull/10115))
+* [`9d639d65c`](https://github.com/dfinity/ic/commit/9d639d65c) Defi: Proposals to upgrade the ckBTC/ckDOGE minters to support ([#10214](https://github.com/dfinity/ic/pull/10214))
+* [`488cf30c1`](https://github.com/dfinity/ic/commit/488cf30c1) Defi: inline DeFi bazel crate dependencies ([#10193](https://github.com/dfinity/ic/pull/10193))
+* [`9fd53d30b`](https://github.com/dfinity/ic/commit/9fd53d30b) Defi(ic-metrics-assert): bump to v0.5.0 with pocket-ic v13 ([#10165](https://github.com/dfinity/ic/pull/10165))
+* [`29103b3bd`](https://github.com/dfinity/ic/commit/29103b3bd) Defi: Updating the block lists for ckBTC and ckETH ([#10026](https://github.com/dfinity/ic/pull/10026))
+* [`5e61c9a33`](https://github.com/dfinity/ic/commit/5e61c9a33) Defi: Inline DeFi Bazel dependencies ([#10117](https://github.com/dfinity/ic/pull/10117))
+* [`7ea4934d0`](https://github.com/dfinity/ic/commit/7ea4934d0) Defi(Ledgers): Update URLs ([#10105](https://github.com/dfinity/ic/pull/10105))
+* [`a6b136048`](https://github.com/dfinity/ic/commit/a6b136048) DRE: inline DRE bazel crate dependencies ([#10197](https://github.com/dfinity/ic/pull/10197))
+* [`f7a842b1e`](https://github.com/dfinity/ic/commit/f7a842b1e) Governance(nervous-system): Update changelog for release 2026-05-08 ([#10151](https://github.com/dfinity/ic/pull/10151))
+* [`1cd35ba14`](https://github.com/dfinity/ic/commit/1cd35ba14) Governance: Inline governance Bazel dependencies ([#10116](https://github.com/dfinity/ic/pull/10116))
+* [`5844abf67`](https://github.com/dfinity/ic/commit/5844abf67) Governance(nns): remove eight year gang bonus base migration logic ([#10108](https://github.com/dfinity/ic/pull/10108))
+* [`3c8e3aca6`](https://github.com/dfinity/ic/commit/3c8e3aca6) Owners(deps): bump urllib3 to 2.7.0 ([#10213](https://github.com/dfinity/ic/pull/10213))
+* [`51ef7213f`](https://github.com/dfinity/ic/commit/51ef7213f) Owners: Update Mainnet IC revisions canisters file ([#10178](https://github.com/dfinity/ic/pull/10178))
+* [`99e0c9431`](https://github.com/dfinity/ic/commit/99e0c9431) Owners: Update Mainnet IC revisions canisters file ([#10177](https://github.com/dfinity/ic/pull/10177))
+* [`f8a0dbc1a`](https://github.com/dfinity/ic/commit/f8a0dbc1a) Owners: Update Mainnet IC revisions canisters file ([#10166](https://github.com/dfinity/ic/pull/10166))
+* [`9cf1998b6`](https://github.com/dfinity/ic/commit/9cf1998b6) Owners: Update Mainnet ICOS revisions file ([#10161](https://github.com/dfinity/ic/pull/10161))
+* [`3172bc5c7`](https://github.com/dfinity/ic/commit/3172bc5c7) Owners: Update Mainnet IC revisions canisters file ([#10162](https://github.com/dfinity/ic/pull/10162))
+* [`258f54561`](https://github.com/dfinity/ic/commit/258f54561) Owners(deps): bump vulnerable python packages ([#10153](https://github.com/dfinity/ic/pull/10153))
+* [`b0ace320d`](https://github.com/dfinity/ic/commit/b0ace320d) Owners: Update Mainnet ICOS revisions file ([#10158](https://github.com/dfinity/ic/pull/10158))
+* [`50b6f5d6f`](https://github.com/dfinity/ic/commit/50b6f5d6f) Owners: Update CODEOWNERS for core-protocol team ([#10114](https://github.com/dfinity/ic/pull/10114))
+* [`bf0b8b642`](https://github.com/dfinity/ic/commit/bf0b8b642) IDX: add --config=flaky\_retry to arm64 bazel tests ([#10220](https://github.com/dfinity/ic/pull/10220))
+* [`3f0063b61`](https://github.com/dfinity/ic/commit/3f0063b61) IDX: consolidation of security teams ([#10212](https://github.com/dfinity/ic/pull/10212))
+* [`727b5d77e`](https://github.com/dfinity/ic/commit/727b5d77e) IDX(CI): don't notify teams on slack if the PR targets ai feature branch ([#10100](https://github.com/dfinity/ic/pull/10100))
+* [`8619c80c5`](https://github.com/dfinity/ic/commit/8619c80c5) IDX(CI): auto-close forks targeting the ai feature branch ([#10101](https://github.com/dfinity/ic/pull/10101))
+* [`7a5643624`](https://github.com/dfinity/ic/commit/7a5643624) IDX(deps): bump ic-wasm to 0.9.11 ([#10157](https://github.com/dfinity/ic/pull/10157))
+* [`d0fe26ba6`](https://github.com/dfinity/ic/commit/d0fe26ba6) IDX: drop overly verbose Bazel labels ([#10143](https://github.com/dfinity/ic/pull/10143))
+* [`371ec23c4`](https://github.com/dfinity/ic/commit/371ec23c4) IDX: use GitHub case syntax instead of ternary "if" ([#10139](https://github.com/dfinity/ic/pull/10139))
+* [`fa3032a7a`](https://github.com/dfinity/ic/commit/fa3032a7a) IDX: send PR notifications to the eng-core-protocol-prs channel ([#10112](https://github.com/dfinity/ic/pull/10112))
+* [`f633690c5`](https://github.com/dfinity/ic/commit/f633690c5) Node: use PerformanceOptimizedAllocation for all performance tests ([#10200](https://github.com/dfinity/ic/pull/10200))
+* [`5ca2b40e3`](https://github.com/dfinity/ic/commit/5ca2b40e3) Prodsec: inline fuzzer bazel crate dependencies ([#10196](https://github.com/dfinity/ic/pull/10196))
+* [`ddb3a96e9`](https://github.com/dfinity/ic/commit/ddb3a96e9) DSM: revert that log\_memory\_limit cannot be set together with memory allocation ([#10111](https://github.com/dfinity/ic/pull/10111))
+* [`c69f39020`](https://github.com/dfinity/ic/commit/c69f39020) core-protocol: default canister settings in create\_canister\_helper ([#10171](https://github.com/dfinity/ic/pull/10171))
+* [`7457f775a`](https://github.com/dfinity/ic/commit/7457f775a) Governance(nns): consolidate deterministic subaccount validation in NeuronStore ([#9186](https://github.com/dfinity/ic/pull/9186))
+* [`cb418740e`](https://github.com/dfinity/ic/commit/cb418740e) Governance(nns): move random subaccount generation into NeuronStore ([#9185](https://github.com/dfinity/ic/pull/9185))
+* [`bde9b4e58`](https://github.com/dfinity/ic/commit/bde9b4e58) core-protocol: Add synchronous commit\_and\_certify for tests ([#10131](https://github.com/dfinity/ic/pull/10131))
+* [`e71083138`](https://github.com/dfinity/ic/commit/e71083138) core-protocol: cycles burn API in install\_code ([#10172](https://github.com/dfinity/ic/pull/10172))
+* [`866b3ebef`](https://github.com/dfinity/ic/commit/866b3ebef) core-protocol: Deflake and re-enable canister\_http\_fault\_tolerance\_test ([#10142](https://github.com/dfinity/ic/pull/10142))
+* [`879597ef9`](https://github.com/dfinity/ic/commit/879597ef9) Node: Add new SEV upgrade test from workspace version to workspace test version ([#10180](https://github.com/dfinity/ic/pull/10180))
+
+### The change is not owned by any replica or HostOS team
+* [`3af058db0`](https://github.com/dfinity/ic/commit/3af058db0) core-protocol: Start remote DKG as soon as request appears in state ([#10055](https://github.com/dfinity/ic/pull/10055))
+* [`9be6310bc`](https://github.com/dfinity/ic/commit/9be6310bc) core-protocol: Active-canister-only scheduling ([#10094](https://github.com/dfinity/ic/pull/10094))
+* [`ed8823d66`](https://github.com/dfinity/ic/commit/ed8823d66) core-protocol: Treat certifications like other in-memory states to keep around when pruning. Reverts the revert of async hashing. ([#10071](https://github.com/dfinity/ic/pull/10071))
+* [`0d9c59329`](https://github.com/dfinity/ic/commit/0d9c59329) IDX: patch askama for reproducibility ([#10167](https://github.com/dfinity/ic/pull/10167))
+* [`671b47ba3`](https://github.com/dfinity/ic/commit/671b47ba3) core-protocol: revert one-time clean up code for orphaned StopCanisterCall ([#9990](https://github.com/dfinity/ic/pull/9990)) ([#10159](https://github.com/dfinity/ic/pull/10159))
+* [`c5f9c1335`](https://github.com/dfinity/ic/commit/c5f9c1335) core-protocol: Remove deprecated\_pseudo\_random\_id ([#10029](https://github.com/dfinity/ic/pull/10029))
+* [`daa7f83f6`](https://github.com/dfinity/ic/commit/daa7f83f6) core-protocol: Remove NonConsumed cycles use case ([#10154](https://github.com/dfinity/ic/pull/10154))
+* [`b27301336`](https://github.com/dfinity/ic/commit/b27301336) core-protocol: Remove deprecated protobuf fields ([#10155](https://github.com/dfinity/ic/pull/10155))
+* [`923b1d017`](https://github.com/dfinity/ic/commit/923b1d017) IDX(deps): bump quinn to 0.11.9 / quinn-proto 0.11.14 ([#10174](https://github.com/dfinity/ic/pull/10174))
+* [`3316f9395`](https://github.com/dfinity/ic/commit/3316f9395) IDX(deps): bump vulnerable rust packages ([#10156](https://github.com/dfinity/ic/pull/10156))
+* [`a7bfc9e71`](https://github.com/dfinity/ic/commit/a7bfc9e71) IDX: bump bazel to 8.7.0 ([#10128](https://github.com/dfinity/ic/pull/10128))
+* [`41fdff31d`](https://github.com/dfinity/ic/commit/41fdff31d) core-protocol: validate\_and\_update\_canister\_settings ([#9996](https://github.com/dfinity/ic/pull/9996))
+* [`a29da5ea6`](https://github.com/dfinity/ic/commit/a29da5ea6) IDX(deps): bump quinn to 0.11.9 / quinn-proto 0.11.14 ([#10174](https://github.com/dfinity/ic/pull/10174)) ([#10201](https://github.com/dfinity/ic/pull/10201))