diff --git a/firmware-2711/latest/pieeprom-2025-12-08.bin b/firmware-2711/latest/pieeprom-2025-12-08.bin
new file mode 100644
index 0000000..9bb2e12
Binary files /dev/null and b/firmware-2711/latest/pieeprom-2025-12-08.bin differ
diff --git a/firmware-2711/latest/recovery.bin b/firmware-2711/latest/recovery.bin
index d8e4127..e26752a 100644
Binary files a/firmware-2711/latest/recovery.bin and b/firmware-2711/latest/recovery.bin differ
diff --git a/firmware-2711/release-notes.md b/firmware-2711/release-notes.md
index 53ab964..ed98b32 100644
--- a/firmware-2711/release-notes.md
+++ b/firmware-2711/release-notes.md
@@ -1,5 +1,18 @@
 # Raspberry Pi4 bootloader EEPROM release notes
 
+## 2025-12-08: arm_loader: Add machine ID derived from OTP values (latest)
+
+* arm_loader: Add machine ID derived from OTP values
+  Machine ID is generated and exposed in device tree as rpi-machine-id
+* arm_ldconfig: Avoid double os_prefix on initramfs
+  When using auto_initramfs we were picking up prefix from the kernel,
+  but also adding os_prefix later:
+  fname = prefixed_path(initramfs_file, os_prefix, temp_path, sizeof(temp_path));
+  See: https://forums.raspberrypi.com/viewtopic.php?t=394238
+* recovery: Use OTP rpiboot GPIO if non-zero
+  If an rpiboot GPIO has already been written to OTP then default to
+  that value if C(program_rpiboot_gpio) is not specified on config.txt.
+
 ## 2025-11-27: helpers/config_loader: Also support bootvar0 eeprom config on Pi4 (latest)
 
 * helpers/config_loader: Also support bootvar0 eeprom config on Pi4