diff --git a/README.md b/README.md
index c1a4d70..4658ac0 100755
--- a/README.md
+++ b/README.md
@@ -56,7 +56,7 @@ Profile keys:
 | `files` | No | Host directory containing custom overlay files. In `imagebuilder` mode this is passed as `FILES=<dir>`. In `source` mode contents are synced into `<build dir>/files/` before build. Defaults to `<buildroot>/src/files`. |
 | `cherrypicks` | No | Space-separated entries in `URL@branch:commit` form. Each commit is fetched and cherry-picked in `source` mode. |
 | `branches` | No | Space-separated `URL@branch` entries to merge into the source worktree in `source` mode. |
-| `release` | No | Default release/ref for the profile (for example `snapshot`, `25.12.3`). CLI `--release` overrides it. |
+| `release` | No | Default release/ref for the profile (for example `snapshot`, `25.12.4`). CLI `--release` overrides it. |
 | `clean` | No | Optional source cleanup step (`clean`, `targetclean`, `dirclean`, `distclean`). CLI `--clean` overrides it. |
 | `repo` | No | Extra Image Builder repository line appended to `repositories.conf` before build. |
 
@@ -70,8 +70,8 @@ Notes:
 
 * `openwrtbuilder -p r4s -p ax6000`
 * `openwrtbuilder -p r4s -r snapshot --debug`
-* `openwrtbuilder -p ax6000 -r 25.12.3 --mode source --debug`
-* `openwrtbuilder -p rpi4 -r 25.12.3 --flash /dev/sdX`
+* `openwrtbuilder -p ax6000 -r 25.12.4 --mode source --debug`
+* `openwrtbuilder -p rpi4 -r 25.12.4 --flash /dev/sdX`
 * `openwrtbuilder -p linksys -r snapshot --ssh-upgrade root@192.168.1.1`
 
 ## Additional Info
diff --git a/openwrtbuilder b/openwrtbuilder
index f7327e2..d0377ac 100755
--- a/openwrtbuilder
+++ b/openwrtbuilder
@@ -5,7 +5,7 @@
 # See README and ./profiles for device configuration
 
 # Set default release
-: "${DEFAULT_RELEASE:=${RELEASE:="25.12.3"}}" # do find all replace
+: "${DEFAULT_RELEASE:=${RELEASE:="25.12.4"}}" # do find all replace
 
 # @internal
 usage() {
@@ -19,7 +19,7 @@ usage() {
 
 	OPTIONS
 	  --profile,-p PROFILE
-	  --release,-r,--version,-v RELEASE ("snapshot", "25.12.3")
+	  --release,-r,--version,-v RELEASE ("snapshot", "25.12.4")
 	    Default: From profile or hardcoded RELEASE    
 	  --buildroot,-b PATH
 	    Default: location of openwrtbuilder script
@@ -45,7 +45,7 @@ usage() {
 	EXAMPLES
 	  openwrtbuilder -p r4s -r snapshot
 	  openwrtbuilder -p ax6000 -r 23.05.0-rc3 --mode source --debug
-	  openwrtbuilder -p rpi4 -r 25.12.3 --flash /dev/sdX
+	  openwrtbuilder -p rpi4 -r 25.12.4 --flash /dev/sdX
 	  openwrtbuilder -p linksys -r snapshot --ssh-upgrade root@192.168.1.1		  
 	EOF
 }
diff --git a/profiles b/profiles
index 1db039a..7859659 100644
--- a/profiles
+++ b/profiles
@@ -2,7 +2,7 @@
 # Device profiles for openwrtbuilder
 # shellcheck disable=SC2034
 
-DEFAULT_RELEASE="25.12.3" # overrides default release in openwrtbuilder
+DEFAULT_RELEASE="25.12.4" # overrides default release in openwrtbuilder
 
 # Default packages (precede with "-" to exclude)
 default_packages=(