diff --git a/security/rekor/Makefile b/security/rekor/Makefile
index 195a8a4ea7a7..82ce0b65befb 100644
--- a/security/rekor/Makefile
+++ b/security/rekor/Makefile
@@ -1,65 +1,65 @@
 PORTNAME=	rekor
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.4.1
+DISTVERSION=	1.4.2
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Software Supply Chain Transparency Log ${${FLAVOR}_COMMENT}
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 FLAVORS=	client server
 FLAVOR?=	${FLAVORS:[1]}
 client_PKGNAMESUFFIX=	-client
 client_COMMENT=		(client only)
 client_PLIST=	${.CURDIR}/pkg-plist.client
 server_PKGNAMESUFFIX=	-server
 server_COMMENT=		(server only)
 server_PLIST=	${.CURDIR}/pkg-plist.server
 
 USES=		cpe go:modules
 CPE_VENDOR=	linuxfoundation
 .if ${FLAVOR} == server
 USE_RC_SUBR=	rekor
 .endif
 
 GO_MODULE=	github.com/sigstore/rekor
 .if ${FLAVOR} == client
 GO_TARGET=	./cmd/rekor-cli
 .elif ${FLAVOR} == server
 GO_TARGET=	./cmd/rekor-server \
 		./cmd/backfill-index \
 		./cmd/cleanup-index \
 		./cmd/copy-index
 .endif
 GO_BUILDFLAGS=	-ldflags="\
 	-X sigs.k8s.io/release-utils/version.gitVersion=$(DISTVERSION) \
 	-X sigs.k8s.io/release-utils/version.gitCommit=$(GIT_HASH) \
 	-X sigs.k8s.io/release-utils/version.gitTreeState=clean \
 	-X sigs.k8s.io/release-utils/version.buildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}}"
 
 .if ${FLAVOR} == server
 USERS=		${PORTNAME}
 GROUPS=		${PORTNAME}
 .endif
 
-GIT_HASH=	7c83add6b10b15d4665b1773ccb6144da95394b7
+GIT_HASH=	23797850121dc2608ef0b3684db460d1decafdfd
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/rekor
 .if ${FLAVOR} == client
 	${INSTALL_DATA} ${WRKSRC}/config/rekor.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor.yaml.sample
 .elif ${FLAVOR} == server
 	${INSTALL_DATA} ${WRKSRC}/rekor-server.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor-server.yaml.sample
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/rekor/distinfo b/security/rekor/distinfo
index 3b43b80f60c6..d8578de11bc6 100644
--- a/security/rekor/distinfo
+++ b/security/rekor/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1765021625
-SHA256 (go/security_rekor/rekor-v1.4.1/v1.4.1.mod) = f09b8f719791b75aa36e056c11137b7c59dc06d2c0c13128e9693e9abd7b35b9
-SIZE (go/security_rekor/rekor-v1.4.1/v1.4.1.mod) = 11314
-SHA256 (go/security_rekor/rekor-v1.4.1/v1.4.1.zip) = fd313e3c24bba8b05524a116f902ad2a489bf12dfd2d7b32c45770ecc13d31c7
-SIZE (go/security_rekor/rekor-v1.4.1/v1.4.1.zip) = 1190306
+TIMESTAMP = 1765230868
+SHA256 (go/security_rekor/rekor-v1.4.2/v1.4.2.mod) = 823633133705966d9f3d066aa588b4d443fe02ae19072479d752b9c275cdb8c7
+SIZE (go/security_rekor/rekor-v1.4.2/v1.4.2.mod) = 11931
+SHA256 (go/security_rekor/rekor-v1.4.2/v1.4.2.zip) = ce409293cfe7137a0343853de16818d33b79f078201996edb2f14adf4e8c466b
+SIZE (go/security_rekor/rekor-v1.4.2/v1.4.2.zip) = 1217718