diff --git a/firmware-2711/default/pieeprom-2025-12-08.bin b/firmware-2711/default/pieeprom-2025-12-08.bin
new file mode 100644
index 0000000..9bb2e12
Binary files /dev/null and b/firmware-2711/default/pieeprom-2025-12-08.bin differ
diff --git a/firmware-2711/default/recovery.bin b/firmware-2711/default/recovery.bin
index 057d937..e26752a 100644
Binary files a/firmware-2711/default/recovery.bin and b/firmware-2711/default/recovery.bin differ
diff --git a/firmware-2711/latest/pieeprom-2025-12-08.bin b/firmware-2711/latest/pieeprom-2025-12-08.bin
new file mode 100644
index 0000000..9bb2e12
Binary files /dev/null and b/firmware-2711/latest/pieeprom-2025-12-08.bin differ
diff --git a/firmware-2711/latest/recovery.bin b/firmware-2711/latest/recovery.bin
index d8e4127..e26752a 100644
Binary files a/firmware-2711/latest/recovery.bin and b/firmware-2711/latest/recovery.bin differ
diff --git a/firmware-2711/release-notes.md b/firmware-2711/release-notes.md
index 53ab964..7597b38 100644
--- a/firmware-2711/release-notes.md
+++ b/firmware-2711/release-notes.md
@@ -1,5 +1,20 @@
 # Raspberry Pi4 bootloader EEPROM release notes
 
+## 2025-12-09: Promote 2025-12-08 to the default release (default)
+
+## 2025-12-08: arm_loader: Add machine ID derived from OTP values (latest)
+
+* arm_loader: Add machine ID derived from OTP values
+  Machine ID is generated and exposed in device tree as rpi-machine-id
+* arm_ldconfig: Avoid double os_prefix on initramfs
+  When using auto_initramfs we were picking up prefix from the kernel,
+  but also adding os_prefix later:
+  fname = prefixed_path(initramfs_file, os_prefix, temp_path, sizeof(temp_path));
+  See: https://forums.raspberrypi.com/viewtopic.php?t=394238
+* recovery: Use OTP rpiboot GPIO if non-zero
+  If an rpiboot GPIO has already been written to OTP then default to
+  that value if C(program_rpiboot_gpio) is not specified on config.txt.
+
 ## 2025-11-27: helpers/config_loader: Also support bootvar0 eeprom config on Pi4 (latest)
 
 * helpers/config_loader: Also support bootvar0 eeprom config on Pi4
diff --git a/firmware-2712/default/pieeprom-2025-12-08.bin b/firmware-2712/default/pieeprom-2025-12-08.bin
new file mode 100644
index 0000000..24fe661
Binary files /dev/null and b/firmware-2712/default/pieeprom-2025-12-08.bin differ
diff --git a/firmware-2712/default/recovery.bin b/firmware-2712/default/recovery.bin
index 7c6c9ae..0c03c40 100644
Binary files a/firmware-2712/default/recovery.bin and b/firmware-2712/default/recovery.bin differ
diff --git a/firmware-2712/latest/pieeprom-2025-12-08.bin b/firmware-2712/latest/pieeprom-2025-12-08.bin
new file mode 100644
index 0000000..24fe661
Binary files /dev/null and b/firmware-2712/latest/pieeprom-2025-12-08.bin differ
diff --git a/firmware-2712/latest/recovery.bin b/firmware-2712/latest/recovery.bin
index 766d921..0c03c40 100644
Binary files a/firmware-2712/latest/recovery.bin and b/firmware-2712/latest/recovery.bin differ
diff --git a/firmware-2712/release-notes.md b/firmware-2712/release-notes.md
index 44385f4..c3543af 100644
--- a/firmware-2712/release-notes.md
+++ b/firmware-2712/release-notes.md
@@ -1,5 +1,17 @@
 # Raspberry Pi5 bootloader EEPROM release notes
 
+## 2025-12-09: Promote 2025-12-08 to the default release (default)
+
+## 2025-12-08: arm_loader: Add machine ID derived from OTP values (latest)
+
+* arm_loader: Add machine ID derived from OTP values
+  Machine ID is generated and exposed in device tree as rpi-machine-id
+* arm_ldconfig: Avoid double os_prefix on initramfs
+  When using auto_initramfs we were picking up prefix from the kernel,
+  but also adding os_prefix later:
+  fname = prefixed_path(initramfs_file, os_prefix, temp_path, sizeof(temp_path));
+  See: https://forums.raspberrypi.com/viewtopic.php?t=394238
+
 ## 2025-11-27: Stop partition-walk after boot-mode timeout/retries limit (latest)
 
 * pi5: Write over-voltage config to the UART log