chore(release): Elect version b95f4a32b41798de115aac9298b51dd1662f1da5 as HostOS candidate for rollout (#2034)

Author: sa-github-api

hostos-releases/b95f4a32b41798de115aac9298b51dd1662f1da5.md

@@ -0,0 +1,68 @@
+Release Notes for [**release-2026-06-04\_04-52-base**](https://github.com/dfinity/ic/tree/release-2026-06-04_04-52-base) (b95f4a32b41798de115aac9298b51dd1662f1da5)
+===================================================================================================================================================================
+
+This release is based on changes since [release-2026-05-29\_04-44-base](https://dashboard.internetcomputer.org/release/a47e5434753752c1d2972fbc4407d14f88964285) (a47e5434753752c1d2972fbc4407d14f88964285).
+
+Please note that some commits may be excluded from this release if they're not relevant, or not modifying the HostOS image. Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.
+
+To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2026-05-29_04-44-base...release-2026-06-04_04-52-base).
+
+Features:
+---------
+
+* [`a65aa3ae6`](https://github.com/dfinity/ic/commit/a65aa3ae6) Core Protocol: Add VCPU type to GuestLaunchMeasurementMetadata ([#10245](https://github.com/dfinity/ic/pull/10245))
+* [`86ae75eed`](https://github.com/dfinity/ic/commit/86ae75eed) Node: Update CI/build images to 26.04 ([#10208](https://github.com/dfinity/ic/pull/10208))
+* [`df6b9e803`](https://github.com/dfinity/ic/commit/df6b9e803) Node: Create baseimage for bootloader ([#10372](https://github.com/dfinity/ic/pull/10372))
+* [`8dc9fa9ad`](https://github.com/dfinity/ic/commit/8dc9fa9ad) Node: drop sudo in proc\_wrapper.sh ([#10361](https://github.com/dfinity/ic/pull/10361))
+* [`fd5c29bc5`](https://github.com/dfinity/ic/commit/fd5c29bc5) Node: Strip timestamps from base images ([#10331](https://github.com/dfinity/ic/pull/10331))
+* [`e24d8cd77`](https://github.com/dfinity/ic/commit/e24d8cd77) Node: Add SEV keyslot metadata ([#10343](https://github.com/dfinity/ic/pull/10343))
+* [`4cab48d35`](https://github.com/dfinity/ic/commit/4cab48d35) Node: Add tee-recovery to HostOS ([#10342](https://github.com/dfinity/ic/pull/10342))
+
+Chores:
+-------
+
+* [`caa989ce3`](https://github.com/dfinity/ic/commit/caa989ce3) Owners: bump rkyv, openssl and tar ([#10359](https://github.com/dfinity/ic/pull/10359))
+* [`b95f4a32b`](https://github.com/dfinity/ic/commit/b95f4a32b) Node: Update Base Image Refs [2026-06-03-1831] ([#10381](https://github.com/dfinity/ic/pull/10381))
+* [`3c71fa835`](https://github.com/dfinity/ic/commit/3c71fa835) Node: Exclude debug logs in guest\_disk ([#10348](https://github.com/dfinity/ic/pull/10348))
+
+------------------------------------------
+
+## Excluded Changes
+
+### Excluded by authors
+* [`e1d449192`](https://github.com/dfinity/ic/commit/e1d449192) Core Protocol: Use CanisterStates in ReplicatedState ([#10287](https://github.com/dfinity/ic/pull/10287))
+* [`310abcc1c`](https://github.com/dfinity/ic/commit/310abcc1c) Core Protocol(execution): set SEV-enabled subnet reference size to 7 ([#9754](https://github.com/dfinity/ic/pull/9754))
+* [`1e06fa65a`](https://github.com/dfinity/ic/commit/1e06fa65a) Core Protocol(crypto): Introduce batched signature verification with multiple messages ([#10339](https://github.com/dfinity/ic/pull/10339))
+* [`781399529`](https://github.com/dfinity/ic/commit/781399529) Core Protocol: Add ColdStats aggregate to CanisterStates ([#10286](https://github.com/dfinity/ic/pull/10286))
+* [`4d24c52ca`](https://github.com/dfinity/ic/commit/4d24c52ca) Core Protocol: Charge a base cost per canister ([#10292](https://github.com/dfinity/ic/pull/10292))
+* [`9823889c6`](https://github.com/dfinity/ic/commit/9823889c6) Core Protocol: persist log\_memory\_store\_persistent\_next\_idx ([#10374](https://github.com/dfinity/ic/pull/10374))
+* [`85c79d423`](https://github.com/dfinity/ic/commit/85c79d423) Core Protocol: Directly serialize signed bytes into Vec holding domain separator ([#10351](https://github.com/dfinity/ic/pull/10351))
+* [`5560103d2`](https://github.com/dfinity/ic/commit/5560103d2) Core Protocol: make FakeStateManager return a valid height witness ([#10364](https://github.com/dfinity/ic/pull/10364))
+
+### Not modifying HostOS
+* [`7e3b8e3c7`](https://github.com/dfinity/ic/commit/7e3b8e3c7) Core Protocol: Drop blessed versions from a few components ([#10366](https://github.com/dfinity/ic/pull/10366))
+* [`849ed7719`](https://github.com/dfinity/ic/commit/849ed7719) Core Protocol: Lower frequency storage charging ([#10306](https://github.com/dfinity/ic/pull/10306))
+* [`69d15cdf7`](https://github.com/dfinity/ic/commit/69d15cdf7) Core Protocol: Charge for storage after aborting DTS executions ([#10305](https://github.com/dfinity/ic/pull/10305))
+* [`0c7c8b831`](https://github.com/dfinity/ic/commit/0c7c8b831) Governance,IDX: Update registry helpers away from blessed versions ([#10301](https://github.com/dfinity/ic/pull/10301))
+* [`4e36d5744`](https://github.com/dfinity/ic/commit/4e36d5744) IDX: clean up and document container-run.sh ([#10367](https://github.com/dfinity/ic/pull/10367))
+* [`cca6ab90a`](https://github.com/dfinity/ic/commit/cca6ab90a) IDX: install all dockerfile tools as root ([#10363](https://github.com/dfinity/ic/pull/10363))
+* [`cfae1be4c`](https://github.com/dfinity/ic/commit/cfae1be4c) Core Protocol: uninstall\_code does not deallocate canister log ([#10379](https://github.com/dfinity/ic/pull/10379))
+* [`03a203b68`](https://github.com/dfinity/ic/commit/03a203b68) Core Protocol: check for canister heap delta rate limit in update\_settings ([#10380](https://github.com/dfinity/ic/pull/10380))
+* [`a38e3516d`](https://github.com/dfinity/ic/commit/a38e3516d) Core Protocol: tests with canister log memory store feature enabled ([#10376](https://github.com/dfinity/ic/pull/10376))
+* [`e403b334e`](https://github.com/dfinity/ic/commit/e403b334e) Core Protocol: Abort download of stripped messages if surrounding block becomes unwanted ([#10365](https://github.com/dfinity/ic/pull/10365))
+* [`bc9780ad0`](https://github.com/dfinity/ic/commit/bc9780ad0) Core Protocol: II init args in PocketIC (seed\_jwks) ([#10352](https://github.com/dfinity/ic/pull/10352))
+* [`6ef4541a2`](https://github.com/dfinity/ic/commit/6ef4541a2) Core Protocol: II init args in PocketIC ([#10344](https://github.com/dfinity/ic/pull/10344))
+* [`716031e78`](https://github.com/dfinity/ic/commit/716031e78) IDX: Allow updating bootloader base automatically ([#10382](https://github.com/dfinity/ic/pull/10382))
+* [`b44af8146`](https://github.com/dfinity/ic/commit/b44af8146) Defi: remove deprecated ic-cdk imports in ic-ledger-suite-orchestrator ([#10291](https://github.com/dfinity/ic/pull/10291))
+* [`2dd488a94`](https://github.com/dfinity/ic/commit/2dd488a94) Defi: remove deprecated ic-cdk imports in ic-icp-test-ledger ([#10322](https://github.com/dfinity/ic/pull/10322))
+* [`00cded718`](https://github.com/dfinity/ic/commit/00cded718) Defi: remove deprecated ic-cdk imports in ic-icp-index ([#10319](https://github.com/dfinity/ic/pull/10319))
+* [`b9811de77`](https://github.com/dfinity/ic/commit/b9811de77) Defi(cketh): upgrade the ckETH minter to reduce minimum ETH withdrawal amount ([#10337](https://github.com/dfinity/ic/pull/10337))
+* [`22b749121`](https://github.com/dfinity/ic/commit/22b749121) Owners: Update Mainnet ICOS revisions file ([#10377](https://github.com/dfinity/ic/pull/10377))
+* [`d811bf4ae`](https://github.com/dfinity/ic/commit/d811bf4ae) Owners: Update Mainnet ICOS revisions file ([#10370](https://github.com/dfinity/ic/pull/10370))
+* [`b94cb55c8`](https://github.com/dfinity/ic/commit/b94cb55c8) Owners: Update Mainnet IC revisions canisters file ([#10375](https://github.com/dfinity/ic/pull/10375))
+* [`60c01efb7`](https://github.com/dfinity/ic/commit/60c01efb7) Owners: bump idna dependency ([#10357](https://github.com/dfinity/ic/pull/10357))
+* [`340d97f3e`](https://github.com/dfinity/ic/commit/340d97f3e) Owners: Update Mainnet ICOS revisions file ([#10360](https://github.com/dfinity/ic/pull/10360))
+* [`bbd96f8ab`](https://github.com/dfinity/ic/commit/bbd96f8ab) Owners: Update Mainnet IC revisions canisters file ([#10354](https://github.com/dfinity/ic/pull/10354))
+* [`ffe1d9984`](https://github.com/dfinity/ic/commit/ffe1d9984) Owners: Update Mainnet IC revisions canisters file ([#10350](https://github.com/dfinity/ic/pull/10350))
+* [`961821b27`](https://github.com/dfinity/ic/commit/961821b27) IDX: clean up container-run.sh ([#10358](https://github.com/dfinity/ic/pull/10358))
+* [`12095c97c`](https://github.com/dfinity/ic/commit/12095c97c) Core Protocol: Deflake //rs/tests/networking/firewall:firewall\_correctness\_test ([#10356](https://github.com/dfinity/ic/pull/10356))