diff --git a/firmware-2712/latest/pieeprom-2025-12-08.bin b/firmware-2712/latest/pieeprom-2025-12-08.bin
new file mode 100644
index 0000000..24fe661
Binary files /dev/null and b/firmware-2712/latest/pieeprom-2025-12-08.bin differ
diff --git a/firmware-2712/latest/recovery.bin b/firmware-2712/latest/recovery.bin
index 766d921..0c03c40 100644
Binary files a/firmware-2712/latest/recovery.bin and b/firmware-2712/latest/recovery.bin differ
diff --git a/firmware-2712/release-notes.md b/firmware-2712/release-notes.md
index 44385f4..06f2392 100644
--- a/firmware-2712/release-notes.md
+++ b/firmware-2712/release-notes.md
@@ -1,5 +1,15 @@
 # Raspberry Pi5 bootloader EEPROM release notes
 
+## 2025-12-08: arm_loader: Add machine ID derived from OTP values (latest)
+
+* arm_loader: Add machine ID derived from OTP values
+  Machine ID is generated and exposed in device tree as rpi-machine-id
+* arm_ldconfig: Avoid double os_prefix on initramfs
+  When using auto_initramfs we were picking up prefix from the kernel,
+  but also adding os_prefix later:
+  fname = prefixed_path(initramfs_file, os_prefix, temp_path, sizeof(temp_path));
+  See: https://forums.raspberrypi.com/viewtopic.php?t=394238
+
 ## 2025-11-27: Stop partition-walk after boot-mode timeout/retries limit (latest)
 
 * pi5: Write over-voltage config to the UART log