Interesting changes since the last release:
2026-11-02: Promote pieeprom-2026-10-30 to the default release (default)
2026-10-30: Support for http server busy (latest)
- Support for http server busy
Handle http responses 429 / 503 with "retry-after" header.
Limit of 30s retry and 3 retry attempts. - Display http response in error message
- recovery: Add HARDWARE_INFO to the rpiboot metadata
- Refresh the boot watchdog while hashing boot.img
The boot watchdog is only refreshed from the poll state machine so the
SHA-256 of a large boot.img runs without a heartbeat. PM_WDOG counts at
most 16.8s so a signed image above about 154 MiB (~9.6 MB/s on 2711)
resets the board after "Verifying" regardless of BOOT_WATCHDOG_TIMEOUT.
Fixes: #914 - rpiboot: Only allow USB device boot when the ROM booted from USB
- Load the customer public key via platform_load_eeprom_file
In rpiboot mode the key used to verify boot.img is read from the host
(pubkey.bin) instead of SPI flash so secure-boot rpiboot works with a blank
or legacy layout EEPROM. - Update embedded MBED TLS.
- Fix boot.img ramdisk check in earlier release. The check was too strict
and would only pass verification on BCM2712.
2026-10-23: 2711: Bump the MFG version to 2 (latest)
- TFTP: Explicitly mark truncated downloads as corrupt
- recovery: Preliminary support for setting bootrom ARB version in OTP to the value embedded in recovery.bin
program_arb=1 (boolean) - FAT: Fix potential infinite loop with FAT12
- 2711: Bump the MFG version to 2
- recovery: Preliminary support for setting the ARB OTP version on 2711.
This is implemented in software in bootsys rather than the bootrom.
2026-10-22: Disable HTTP redirects (latest)
- Improve HTTP status handling
The code currently only handles specific responses and doesn't treat
an unexpected response as an error. An unexpected response will be
treated as the file contents and fail the signature check. - Disable HTTP redirects
For safety disable HTTP redirects.
If you change HTTP_HOST you can re-enable redirects with
HTTP_ALLOW_REDIRECTS=1 in the eeprom config. - sd_host: Fix the capacity calculation for pre-SDHC cards
s->capacity was copied before the READ_BL_LEN adjustment. Only relevant
for 1024, 2048 byte block cards. - sd_host: Fix potential infinite loop with CMD1 poll
A card that keeps answering busy stalled boot indefinitely instead of
failing over to the next boot mode. - Fix platform_error_msg timestamps
platform_error_msg bypasses the usual logging infrastructure, and has
its own copy of the old ms -> cs bug. Fix that bug.
2026-10-15: 2711: recovery.bin: SDRAM init robustness improvements (latest)
Add some robustness improvements (so far theoretical) to the low-speed memory
init code used in recovery.bin.