diff --git a/sysutils/nerdctl/Makefile b/sysutils/nerdctl/Makefile
index 841c602afe64..b7f328afa3f9 100644
--- a/sysutils/nerdctl/Makefile
+++ b/sysutils/nerdctl/Makefile
@@ -1,59 +1,58 @@
 PORTNAME=	nerdctl
 DISTVERSIONPREFIX=	v
-DISTVERSION=	2.3.1
-PORTREVISION=	1
+DISTVERSION=	2.3.3
 CATEGORIES=	sysutils
 DISTFILES+=	go.mod
 
 MAINTAINER=	laurent@FreeBSD.org
 COMMENT=	Docker-compatible CLI for containerd
 WWW=		https://github.com/containerd/nerdctl
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		go:1.26+,modules
 USE_GITHUB=	yes
 GH_ACCOUNT=	containerd
 
 GO_MODULE=	github.com/containerd/nerdctl/v2
 GO_TARGET=	./cmd/${PORTNAME}
 GO_BUILDFLAGS=	-ldflags "-s -w -X ${GO_MODULE}/pkg/version.Version=${DISTVERSIONFULL}"
 GO_TESTTARGET=	./pkg/...
 
 PLIST_FILES=	bin/containerd-rootless-setuptool.sh \
 		bin/containerd-rootless.sh \
 		bin/nerdctl \
 		etc/bash_completion.d/${PORTNAME} \
 		share/fish/vendor_completions.d/${PORTNAME}.fish \
 		share/zsh/site-functions/_${PORTNAME}
 
 PORTDOCS=	*
 
 OPTIONS_DEFINE=	DOCS
 
 pre-fetch:
 	@${MKDIR} ${DISTDIR}/${DIST_SUBDIR}
 	[ -e ${DISTDIR}/${DIST_SUBDIR}/go.mod ] || \
 		(${FETCH_CMD} ${FETCH_BEFORE_ARGS} \
 			https://raw.githubusercontent.com/containerd/nerdctl/v${DISTVERSION}/go.mod \
 			-o ${DISTDIR}/${DIST_SUBDIR}/go.mod; \
 		${REINPLACE_CMD} '/tigron/d' ${DISTDIR}/${DIST_SUBDIR}/go.mod)
 
 post-install:
 	${INSTALL_SCRIPT} ${WRKSRC}/extras/rootless/* ${STAGEDIR}${PREFIX}/bin
 	@${MKDIR} ${STAGEDIR}${PREFIX}/etc/bash_completion.d \
 		  ${STAGEDIR}${PREFIX}/share/fish/vendor_completions.d \
 		  ${STAGEDIR}${PREFIX}/share/zsh/site-functions \
 		  ${WRKDIR}/tmp
 	${STAGEDIR}${PREFIX}/bin/${PORTNAME} --data-root=${WRKDIR}/tmp completion bash \
 		> ${STAGEDIR}${PREFIX}/etc/bash_completion.d/${PORTNAME}
 	${STAGEDIR}${PREFIX}/bin/${PORTNAME} --data-root=${WRKDIR}/tmp completion fish \
 		> ${STAGEDIR}${PREFIX}/share/fish/vendor_completions.d/${PORTNAME}.fish
 	${STAGEDIR}${PREFIX}/bin/${PORTNAME} --data-root=${WRKDIR}/tmp completion zsh  \
 		> ${STAGEDIR}${PREFIX}/share/zsh/site-functions/_${PORTNAME}
 
 post-install-DOCS-on:
 	(cd ${WRKSRC} && ${COPYTREE_SHARE} "README.md docs" ${STAGEDIR}${DOCSDIR})
 
 .include <bsd.port.mk>
diff --git a/sysutils/nerdctl/distinfo b/sysutils/nerdctl/distinfo
index a882eab88ee7..59691f8364a5 100644
--- a/sysutils/nerdctl/distinfo
+++ b/sysutils/nerdctl/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1779966762
-SHA256 (go/sysutils_nerdctl/containerd-nerdctl-v2.3.1_GH0/go.mod) = d3653f2cc113009dc7662a4ae219a3c0d543dbad1556f0cb1608a8f4e8c004f7
-SIZE (go/sysutils_nerdctl/containerd-nerdctl-v2.3.1_GH0/go.mod) = 7551
-SHA256 (go/sysutils_nerdctl/containerd-nerdctl-v2.3.1_GH0/containerd-nerdctl-v2.3.1_GH0.tar.gz) = f9c66b5a62f3a4967e246f10b06892ef9d08e3b2bfddd2be0b7346c8c47c05b5
-SIZE (go/sysutils_nerdctl/containerd-nerdctl-v2.3.1_GH0/containerd-nerdctl-v2.3.1_GH0.tar.gz) = 1550447
+TIMESTAMP = 1781973888
+SHA256 (go/sysutils_nerdctl/containerd-nerdctl-v2.3.3_GH0/go.mod) = e4e55d462075e056adfbb9e7132411ffd8c1d307c8b4bd3aefd4f861787e78d9
+SIZE (go/sysutils_nerdctl/containerd-nerdctl-v2.3.3_GH0/go.mod) = 7481
+SHA256 (go/sysutils_nerdctl/containerd-nerdctl-v2.3.3_GH0/containerd-nerdctl-v2.3.3_GH0.tar.gz) = eacca139faba3182cc6be633f146e02f3744c5dbec2cf93d6b089d7e63621614
+SIZE (go/sysutils_nerdctl/containerd-nerdctl-v2.3.3_GH0/containerd-nerdctl-v2.3.3_GH0.tar.gz) = 1552038