v2026.05.17-2711-0138c0
rpi-boot-eeprom-recovery-2026-05-17
Added 4
- Record hardware board information in OTP on Pi4, reporting minimal bootloader version via device-tree as /proc/device-tree/chosen/rpi-min-boot-ver
- Add error code for bootloader memory test, displaying 5 short flashes if DDR init firmware succeeds but memory test fails
- Allow configuration of DPI clock from dt-blob in vcfw/plat_conf
- Support conditional filter for eight customer OTP rows in config.txt from Pi 1 onwards
Changed 6
- Update Broadcom DDR firmware to 2.35
- Increase manufacturing version to 1 for 2711 to reflect Broadcom SDRAM DDR init firmware update
- Perform preliminary clock driver refactoring in arm_loader_dvfs
- Update Broadcom SDRAM firmware to v2.34 to support wider variety of SDRAM chips
- Automatically reboot after displaying a fatal error three times in a row instead of waiting forever, with REBOOT_ON_FATAL_ERROR=0 option to disable
- Assume eMMC for CM4/CM5 non-lite modules by skipping SD interface condition command timeout and enabling eMMC mode directly, saving approximately 250ms of boot time
Fixed 2
- Fix partition walk for boot_ramdisk and secure-boot to allow retries when boot.img is not found
- Improve argument validation in rpi-fw-crypto to prevent lock-up from bad key-id or invalid private key during HMAC operations
Interesting changes since the last release:-
2026-05-17: Update Broadcom DDR firware to 2.35 (latest)
- 2711: Increase the manufacturing version to 1 Increase the manufacturing version to 1 to reflect the update to the Broadcom SDRAM DDR init firmware.
- 2711: Update SDRAM FW to 2.35
- arm_loader_dvfs: Preliminary clock driver refactoring
- pi4: Record hardware board information in OTP On Pi4 report the minimal bootloader version (manufacturing release) in OTP and make it available via device-tree as /proc/device-tree/chosen/rpi-min-boot-ver
2026-04-14: Update Broadcom SDRAM firmware to v2.34 (latest)
- Update the Broadcom SDRAM firmware to v2.34 to support a wider variety of SDRAM chips.
- Add an error code for the bootloader memory test. The bootloader contains simple memory test to validate that the DDR init firmware has completed successfully. If the DDR init firmware reports an error code then continue to display 8 short flashes. However, if the DDR init firmware is successful but the memory test fails then display 5 short flashes. This is very unlikely to fail in practise but is useful debug mechanism when stress testing boards e.g. different temperatures.
- vcfw/plat_conf: Allow configuration of DPI clock from dt-blob
- Automatically reboot after a displaying a fatal error Change the fatal error handler to perform a hard reset after displaying the fatal error three times in a row instead of waiting forever. This change can mitigate intermittent hardware issues due e.g. power supplies, HATs or board temperature. Displaying the error pattern three times first rate limits reboots. If a faster reboot is required then the BOOT_WATCHDOG setting should be used instead. To disable this feature set REBOOT_ON_FATAL_ERROR=0 in the bootloader config.
2026-02-23: Fix partition walk for boot_ramdisk / secure-boot (latest)
- Fix partition walk for boot_ramdisk / secure-boot If secure-boot / boot_ramdisk was enabled and boot.img was not found then the bootloader would immediately exit the boot mode instead allowing the partition walk to run. Change the logic to allow retries if partition walk was enabled.
2026-02-06: config: Add support for customer OTP rows in conditional expressions (latest)
- config: Add support for customer OTP rows in conditional expressions Support conditional filter for eight customer OTP rows to be used by config.txt from Pi 1 onwards. (Requires updated start4.elf)
- rpi-fw-crypto: Fix bad hmac arguments lock-up Improve argument validation so that a bad key-id or invalid private key can no longer cause a lock-up during HMAC operations.
- Assume eMMC for CM4/CM5 non-lite Attempt the fast path by skipping the SD interface condition command timeout on CM4/CM5 (non-lite) modules and enable eMMC mode directly. This saves ~250ms of the boot time.