chore(release): Elect version 44e6a4830a03f05101a33d7baeb1f92c5c8093bc as GuestOS candidate for rollout (#1779)

Author: sa-github-api

replica-releases/44e6a4830a03f05101a33d7baeb1f92c5c8093bc.md

@@ -0,0 +1,106 @@
+Release Notes for [release-2025-10-23_03-18-base](https://github.com/dfinity/ic/tree/release-2025-10-23_03-18-base) (`44e6a4830a03f05101a33d7baeb1f92c5c8093bc`)
+This release is based on changes since [release-2025-10-17_03-17-base](https://dashboard.internetcomputer.org/release/286295f0397521cd59ca7792df446c57379204fa) (`286295f0397521cd59ca7792df446c57379204fa`).
+
+Please note that some commits may be excluded from this release if they're not relevant, or not modifying the GuestOS image.
+Additionally, descriptions of some changes might have been slightly modified to fit the release notes format.
+
+To see a full list of commits added since last release, compare the revisions on [GitHub](https://github.com/dfinity/ic/compare/release-2025-10-17_03-17-base...release-2025-10-23_03-18-base).
+## Features:
+* [`659872a71`](https://github.com/dfinity/ic/commit/659872a71) Consensus,Interface: Consider IDKG transcripts stored in state during complaints phase ([#7214](https://github.com/dfinity/ic/pull/7214))
+* [`854afb6b0`](https://github.com/dfinity/ic/commit/854afb6b0) Execution,Interface: Add metrics for ingress history times ([#7329](https://github.com/dfinity/ic/pull/7329))
+* [`dd580377d`](https://github.com/dfinity/ic/commit/dd580377d) Execution,Interface(canister_logging): add `log_memory_limit` configuration to canister settings ([#7065](https://github.com/dfinity/ic/pull/7065))
+* [`3e6cc22c3`](https://github.com/dfinity/ic/commit/3e6cc22c3) Execution,Interface(canister_logging): charge for fetching logs via update call ([#7033](https://github.com/dfinity/ic/pull/7033))
+* [`669b07d03`](https://github.com/dfinity/ic/commit/669b07d03) Execution,Interface,Message Routing: Credit the caller any cycles attached to late responses ([#7093](https://github.com/dfinity/ic/pull/7093))
+* [`aec057306`](https://github.com/dfinity/ic/commit/aec057306) Interface(ICRC-Index): stop indexing and report error in case of unknown block ([#6996](https://github.com/dfinity/ic/pull/6996))
+* [`fed7cfc6a`](https://github.com/dfinity/ic/commit/fed7cfc6a) Interface,Message Routing: Reject misrouted responses ([#7107](https://github.com/dfinity/ic/pull/7107))
+## Bugfixes:
+* [`7397e85ad`](https://github.com/dfinity/ic/commit/7397e85ad) Consensus,Execution,Interface: Turn off query stats for transform functions of https outcalls ([#7144](https://github.com/dfinity/ic/pull/7144))
+* [`4beec86b7`](https://github.com/dfinity/ic/commit/4beec86b7) Consensus,Interface: let all pprof endpoints share the same concurency limiter ([#7298](https://github.com/dfinity/ic/pull/7298))
+* [`f008a11c6`](https://github.com/dfinity/ic/commit/f008a11c6) Interface,Node: SEV Upgrade fixes and improvements ([#7305](https://github.com/dfinity/ic/pull/7305))
+## Performance improvements:
+* [`7eb90c83e`](https://github.com/dfinity/ic/commit/7eb90c83e) Consensus,Interface(idkg): Increase the number of transcript creation/validation threads to 16 ([#7351](https://github.com/dfinity/ic/pull/7351))
+* [`efab0b907`](https://github.com/dfinity/ic/commit/efab0b907) Crypto,Interface(crypto): adapt ThresholdSchnorrSigInputs to only hold references ([#7285](https://github.com/dfinity/ic/pull/7285))
+## Chores:
+* [`05cc29051`](https://github.com/dfinity/ic/commit/05cc29051) Consensus,Interface(http-outcalls): remove outdated ipv4 error message ([#7357](https://github.com/dfinity/ic/pull/7357))
+* [`97b2a2545`](https://github.com/dfinity/ic/commit/97b2a2545) Consensus,Interface: Fix flaky `test_stable_registry_version` ([#7290](https://github.com/dfinity/ic/pull/7290))
+* [`e7251473f`](https://github.com/dfinity/ic/commit/e7251473f) Execution,Interface,Message Routing: Deprecate old field ([#7273](https://github.com/dfinity/ic/pull/7273))
+* [`b358d8010`](https://github.com/dfinity/ic/commit/b358d8010) Interface: upgrade rust: 1.89.0 -> 1.90.0 ([#7322](https://github.com/dfinity/ic/pull/7322))
+* [`5fff0ef52`](https://github.com/dfinity/ic/commit/5fff0ef52) Interface,Message Routing: Rename `DiffScript::copy_files` to `hardlink_files` to reflect actual implementation ([#7320](https://github.com/dfinity/ic/pull/7320))
+* [`634b282d9`](https://github.com/dfinity/ic/commit/634b282d9) Interface,Message Routing: Add state sync step duration for deliver_state_sync ([#7318](https://github.com/dfinity/ic/pull/7318))
+* [`588f39e41`](https://github.com/dfinity/ic/commit/588f39e41) Interface,Message Routing: Allow reject signals from the wrong subnet ([#7330](https://github.com/dfinity/ic/pull/7330))
+* [`13164179a`](https://github.com/dfinity/ic/commit/13164179a) Owners: update `async-trait` to v0.1.89 ([#7335](https://github.com/dfinity/ic/pull/7335))
+* [`c4960c9c8`](https://github.com/dfinity/ic/commit/c4960c9c8) Owners: move local repositories to third_party ([#7311](https://github.com/dfinity/ic/pull/7311))
+* [`e9dbcdf23`](https://github.com/dfinity/ic/commit/e9dbcdf23) Owners: move lmdb repository to MODULE.bazel ([#7294](https://github.com/dfinity/ic/pull/7294))
+* [`10bf68839`](https://github.com/dfinity/ic/commit/10bf68839) Node: One more (f)stab at UpgradeVM systemd config ([#7355](https://github.com/dfinity/ic/pull/7355))
+* [`a09e328c2`](https://github.com/dfinity/ic/commit/a09e328c2) Node: Add comment to override ([#7313](https://github.com/dfinity/ic/pull/7313))
+* [`998cdb243`](https://github.com/dfinity/ic/commit/998cdb243) Node: Don't fail the boot if the data partitions cannot be mounted ([#7303](https://github.com/dfinity/ic/pull/7303))
+## Refactoring:
+* [`5d1b2482d`](https://github.com/dfinity/ic/commit/5d1b2482d) Consensus,Interface(recovery): more consistent NNS vs app subnet recovery system tests ([#7309](https://github.com/dfinity/ic/pull/7309))
+* [`e3a7a3632`](https://github.com/dfinity/ic/commit/e3a7a3632) Execution,Interface: Use CanisterManager in query handler ([#7087](https://github.com/dfinity/ic/pull/7087))
+* [`4557762fb`](https://github.com/dfinity/ic/commit/4557762fb) Execution,Interface: Use setup_execution consistently across production and test code ([#7138](https://github.com/dfinity/ic/pull/7138))
+* [`a32cf9cc0`](https://github.com/dfinity/ic/commit/a32cf9cc0) Execution,Interface: Use compute capacity based on scheduler cores in tests ([#7188](https://github.com/dfinity/ic/pull/7188))
+## Tests:
+* [`8fbf909bd`](https://github.com/dfinity/ic/commit/8fbf909bd) Consensus,Interface(consensus): Implement unit tests which check that payload limits are taken into account during payload building/validation ([#7261](https://github.com/dfinity/ic/pull/7261))
+* [`b3b76edb2`](https://github.com/dfinity/ic/commit/b3b76edb2) Consensus,Interface,Node(nns-recovery): fix the DFINITY-owned node like the other NPs ([#7184](https://github.com/dfinity/ic/pull/7184))
+* [`c12809774`](https://github.com/dfinity/ic/commit/c12809774) Execution,Interface: convert remaining Haskell tests of execution environment to Rust ([#7254](https://github.com/dfinity/ic/pull/7254))
+## Documentation:
+* [`fe035fff0`](https://github.com/dfinity/ic/commit/fe035fff0) Consensus,Interface(nns-recovery): add documentation to NNS recovery ([#7369](https://github.com/dfinity/ic/pull/7369))
+## Other changes:
+* [`3d7a7bc94`](https://github.com/dfinity/ic/commit/3d7a7bc94) Interface,Message Routing: perf:skip preallocating files which are later hardlinked ([#7245](https://github.com/dfinity/ic/pull/7245))
+
+## Excluded Changes
+
+### Changed files are excluded by file path filter
+* [`1f3f1c481`](https://github.com/dfinity/ic/commit/1f3f1c481) Crypto,Interface(crypto): improve readabilty of ic-types' tECDSA tests ([#7246](https://github.com/dfinity/ic/pull/7246))
+* [`0373864cd`](https://github.com/dfinity/ic/commit/0373864cd) Execution,Interface: Use u64 for methods that set capacities in tests ([#7306](https://github.com/dfinity/ic/pull/7306))
+
+### Not modifying GuestOS
+* [`06c30c71f`](https://github.com/dfinity/ic/commit/06c30c71f) Execution(PocketIC): make library const LATEST_SERVER_VERSION public ([#7288](https://github.com/dfinity/ic/pull/7288))
+* [`0711ee341`](https://github.com/dfinity/ic/commit/0711ee341) Interface(ic-admin): Added take-subnet-offline-for-repairs. ([#7361](https://github.com/dfinity/ic/pull/7361))
+* [`071f1565b`](https://github.com/dfinity/ic/commit/071f1565b) Interface(registry): Implement set_subnet_operational_level. ([#7275](https://github.com/dfinity/ic/pull/7275))
+* [`80a7008a5`](https://github.com/dfinity/ic/commit/80a7008a5) Interface(registry): Invariant check to prevent unassigned nodes from having ssh_write_access ([#7314](https://github.com/dfinity/ic/pull/7314))
+* [`52c88e161`](https://github.com/dfinity/ic/commit/52c88e161) Interface(ckdoge): deposit flow with `update_balance` ([#7095](https://github.com/dfinity/ic/pull/7095))
+* [`5914dc3d7`](https://github.com/dfinity/ic/commit/5914dc3d7) Interface(proposal_cli): add dogecoin canister ([#7302](https://github.com/dfinity/ic/pull/7302))
+* [`9396b587c`](https://github.com/dfinity/ic/commit/9396b587c) Consensus,Interface: experiment to stabilize //rs/bitcoin/adapter:adapter_integration_test ([#7326](https://github.com/dfinity/ic/pull/7326))
+* [`2b914f43d`](https://github.com/dfinity/ic/commit/2b914f43d) Execution(PocketIC): fix flakiness of canister http test in live mode ([#7304](https://github.com/dfinity/ic/pull/7304))
+* [`8dc57541f`](https://github.com/dfinity/ic/commit/8dc57541f) Interface(nns): address security review + activate feature flag ([#7287](https://github.com/dfinity/ic/pull/7287))
+* [`b38564fd8`](https://github.com/dfinity/ic/commit/b38564fd8) Owners: dep-scan trivy file not found error ([#7368](https://github.com/dfinity/ic/pull/7368))
+* [`4d42e5cd1`](https://github.com/dfinity/ic/commit/4d42e5cd1) Node: sleep and repeat parameter validation error log for console visibility ([#7315](https://github.com/dfinity/ic/pull/7315))
+* [`f6bad0a5e`](https://github.com/dfinity/ic/commit/f6bad0a5e) Execution,Interface: Add worst case BitVec benchmarks ([#7339](https://github.com/dfinity/ic/pull/7339))
+* [`ec9f1c8c8`](https://github.com/dfinity/ic/commit/ec9f1c8c8) Consensus,Interface: panic in bitcoin Daemon::new ([#7364](https://github.com/dfinity/ic/pull/7364))
+* [`4a667f107`](https://github.com/dfinity/ic/commit/4a667f107) Consensus,Interface: wait for "Done loading" message in the adapter_integration_test ([#7350](https://github.com/dfinity/ic/pull/7350))
+* [`2dea3f359`](https://github.com/dfinity/ic/commit/2dea3f359) Consensus,Interface: log daemon command in adapter_integration_test ([#7349](https://github.com/dfinity/ic/pull/7349))
+* [`3c6f501ca`](https://github.com/dfinity/ic/commit/3c6f501ca) Consensus,Interface: remove requires-network tag from adapter_integration_test ([#7337](https://github.com/dfinity/ic/pull/7337))
+* [`b7f192e8b`](https://github.com/dfinity/ic/commit/b7f192e8b) Consensus,Interface(nns-recovery): higher timeout when waiting for subnet membership change ([#7281](https://github.com/dfinity/ic/pull/7281))
+* [`8d74572c4`](https://github.com/dfinity/ic/commit/8d74572c4) Crypto: Setup for a new release of ic-pub-key to crates.io ([#7257](https://github.com/dfinity/ic/pull/7257))
+* [`2cd3b9b5f`](https://github.com/dfinity/ic/commit/2cd3b9b5f) Execution(PocketIC): clean up validation code when creating a new PocketIC instance ([#7347](https://github.com/dfinity/ic/pull/7347))
+* [`998b4e8a7`](https://github.com/dfinity/ic/commit/998b4e8a7) Execution,Interface: Refactor 100k canister benchmark ([#7323](https://github.com/dfinity/ic/pull/7323))
+* [`595f0cc6c`](https://github.com/dfinity/ic/commit/595f0cc6c) Interface(ICRC-Rosetta): more informative block parsing error messages ([#7277](https://github.com/dfinity/ic/pull/7277))
+* [`b92f12be2`](https://github.com/dfinity/ic/commit/b92f12be2) Interface(nns): Clean up known neurons related feature flags ([#7286](https://github.com/dfinity/ic/pull/7286))
+* [`9bc3cc673`](https://github.com/dfinity/ic/commit/9bc3cc673) Interface: Only import type when not targeting wasm architectures ([#7308](https://github.com/dfinity/ic/pull/7308))
+* [`9a745d50f`](https://github.com/dfinity/ic/commit/9a745d50f) Interface(registry): Declare new set_subnet_operational_level method in the Registry canister. ([#7268](https://github.com/dfinity/ic/pull/7268))
+* [`c67b20bf0`](https://github.com/dfinity/ic/commit/c67b20bf0) Interface: remove rules_sol ([#7292](https://github.com/dfinity/ic/pull/7292))
+* [`68dac1a89`](https://github.com/dfinity/ic/commit/68dac1a89) Owners: make Consensus own NNS Recovery testnet ([#7380](https://github.com/dfinity/ic/pull/7380))
+* [`8c1dd9e12`](https://github.com/dfinity/ic/commit/8c1dd9e12) Owners(icrc-ledger-types): release version 0.1.12 of icrc-ledger-types ([#7291](https://github.com/dfinity/ic/pull/7291))
+* [`4ea8a2316`](https://github.com/dfinity/ic/commit/4ea8a2316) Owners: Update Mainnet IC revisions canisters file ([#7358](https://github.com/dfinity/ic/pull/7358))
+* [`b26b53d7d`](https://github.com/dfinity/ic/commit/b26b53d7d) Owners(ci): split workflow updating mainnet versions ([#7346](https://github.com/dfinity/ic/pull/7346))
+* [`8452264f8`](https://github.com/dfinity/ic/commit/8452264f8) Owners: Update Mainnet ICOS revisions file ([#7340](https://github.com/dfinity/ic/pull/7340))
+* [`17292cdcb`](https://github.com/dfinity/ic/commit/17292cdcb) Owners: add .github/repo_policies/EXTERNAL_CONTRIB_BLACKLIST ([#7307](https://github.com/dfinity/ic/pull/7307))
+* [`52680bfc9`](https://github.com/dfinity/ic/commit/52680bfc9) Owners: Update Mainnet ICOS revisions file ([#7332](https://github.com/dfinity/ic/pull/7332))
+* [`99e51764a`](https://github.com/dfinity/ic/commit/99e51764a) Owners: Update Mainnet ICOS revisions file ([#7324](https://github.com/dfinity/ic/pull/7324))
+* [`dcead772e`](https://github.com/dfinity/ic/commit/dcead772e) Owners: revert "fix: use lld linker on aarch64-linux to work around linker bug ([#6752](https://github.com/dfinity/ic/pull/6752))" ([#7321](https://github.com/dfinity/ic/pull/7321))
+* [`de03eab21`](https://github.com/dfinity/ic/commit/de03eab21) Owners: explain repositories argument of canisters repo rule ([#7312](https://github.com/dfinity/ic/pull/7312))
+* [`60d5874b2`](https://github.com/dfinity/ic/commit/60d5874b2) Owners: move wasm-test-suite to third_party ([#7297](https://github.com/dfinity/ic/pull/7297))
+* [`73129224e`](https://github.com/dfinity/ic/commit/73129224e) Owners: move rclone to MODULE ([#7299](https://github.com/dfinity/ic/pull/7299))
+* [`ef17752a9`](https://github.com/dfinity/ic/commit/ef17752a9) Owners: move miracl-core to third_party ([#7296](https://github.com/dfinity/ic/pull/7296))
+* [`c99507058`](https://github.com/dfinity/ic/commit/c99507058) Interface(ckbtc): use `canlog` for logging ([#7328](https://github.com/dfinity/ic/pull/7328))
+* [`022009b57`](https://github.com/dfinity/ic/commit/022009b57) Interface(nns): Clean up first_proposal_id_to_record_voting_history ([#7284](https://github.com/dfinity/ic/pull/7284))
+* [`c48f82037`](https://github.com/dfinity/ic/commit/c48f82037) Owners(canlog): Use `regex-lite` instead of `regex` for parsing regular expressions ([#7353](https://github.com/dfinity/ic/pull/7353))
+* [`768670f34`](https://github.com/dfinity/ic/commit/768670f34) Consensus,Interface: fix adapter test flakiness by increasing timeout ([#7338](https://github.com/dfinity/ic/pull/7338))
+* [`3374ad862`](https://github.com/dfinity/ic/commit/3374ad862) Consensus,Interface(consensus): add some benches ([#7300](https://github.com/dfinity/ic/pull/7300))
+* [`a8f81f075`](https://github.com/dfinity/ic/commit/a8f81f075) Crypto,Interface(crypto): Add integration tests of VetKD protocol ([#7098](https://github.com/dfinity/ic/pull/7098))
+* [`609464f84`](https://github.com/dfinity/ic/commit/609464f84) Execution,Interface: Message load during canister migration test ([#7359](https://github.com/dfinity/ic/pull/7359))
+* [`c46f1b371`](https://github.com/dfinity/ic/commit/c46f1b371) Interface(Rosetta): Use tokio::time::sleep instead of std::thread::sleep in async functions ([#7370](https://github.com/dfinity/ic/pull/7370))
+* [`0ad091870`](https://github.com/dfinity/ic/commit/0ad091870) Interface(cketh/ckerc20): update EVM RPC canister WASM to v2.6.0 ([#7367](https://github.com/dfinity/ic/pull/7367))
+* [`44e6a4830`](https://github.com/dfinity/ic/commit/44e6a4830) Interface: DO NOT MERGE YET feat(governance): Enable SetSubnetOperationalLevel. ([#7377](https://github.com/dfinity/ic/pull/7377))
+* [`16f9c104f`](https://github.com/dfinity/ic/commit/16f9c104f) Interface(nns): deactivate the enable_neuron_follow_restrictions flag ([#7272](https://github.com/dfinity/ic/pull/7272))