diff --git a/security/vault/Makefile b/security/vault/Makefile
index 41d2bc5129da..a1e1c7d3b1d5 100644
--- a/security/vault/Makefile
+++ b/security/vault/Makefile
@@ -1,73 +1,72 @@
 PORTNAME=	vault
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.21.0
-PORTREVISION=	1
+DISTVERSION=	1.21.1
 CATEGORIES=	security
 MASTER_SITES=	https://raw.githubusercontent.com/hashicorp/vault/${DISTVERSIONFULL}/ \
 		LOCAL/bofh/security/${PORTNAME}/:web_ui
 DISTFILES=	go.mod \
 		api/go.mod \
 		api/auth/approle/go.mod \
 		api/auth/kubernetes/go.mod \
 		api/auth/userpass/go.mod \
 		sdk/go.mod \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX}:web_ui
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Tool for securely accessing secrets
 WWW=		https://vaultproject.io/
 
 NOT_FOR_ARCHS=	armv7 i386
 NOT_FOR_ARCHS_REASON=	fatal error: out of memory
 
 LICENSE=	MPL20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 .if defined(MAINTAINER_MODE)
 EXTRACT_DEPENDS=npm-node20>0:www/npm-node20 \
 		yarn-node20>0:www/yarn-node20
 .endif
 
 USES=		cpe go:modules
 CPE_VENDOR=	hashicorp
 USE_GITHUB=	yes
 GH_ACCOUNT=	hashicorp
 USE_RC_SUBR=	vault
 
 GO_MODULE=	github.com/hashicorp/vault
 GO_BUILDFLAGS=	-ldflags="-s \
 		-X github.com/hashicorp/vault/version.GitCommit=${GITID} \
 		-X github.com/hashicorp/vault/version.BuildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}} \
 		" -tags "vault ui"
 
 SUB_FILES=	pkg-message
 
 USERS=		vault
 GROUPS=		vault
 
 PLIST_FILES=	bin/${PORTNAME}
 
-GITID=	818ca8b3575ea937ca48b640baf35e1b2ede1833
+GITID=	2453aac2638a6ae243341b4e0657fd8aea1cbf18
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-patch:
 	${CP} -Rf ${WRKDIR}/web_ui ${WRKSRC}/http/
 
 .if defined(MAINTAINER_MODE)
 _make-web_ui: clean extract
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} npm rebuild node-sass
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn run build
 	cd ${WRKDIR} && ${TAR} -czf \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} -C ${WRKSRC}/http web_ui
 	scp ${WRKDIR}/${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} \
 		bofh@freefall.freebsd.org:public_distfiles/security/${PORTNAME}/
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/vault/distinfo b/security/vault/distinfo
index eb54c2e4aeca..57b43ff651ff 100644
--- a/security/vault/distinfo
+++ b/security/vault/distinfo
@@ -1,17 +1,17 @@
-TIMESTAMP = 1761995742
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/go.mod) = 11ffcb90371dfc1b02473b6311421c44f77e8f93f6072609e81e8cdc35b11c52
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/go.mod) = 30903
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/go.mod) = c0d25838a7b72c0a5450c0c346e22eea9d24074c637f99e13941fd74980330e5
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/go.mod) = 1659
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/auth/approle/go.mod) = 1217783c92a7ffc023a1db2a818c9f4072b455cab55c21e8d1b6e724b2303055
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/auth/approle/go.mod) = 1065
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/auth/kubernetes/go.mod) = 1f226b69f64b3e5dae3f1a5c8ee282927f5c41354939b5db02b04ce792da7d20
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/auth/kubernetes/go.mod) = 1068
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/auth/userpass/go.mod) = 8812ea629a7c014adafb6ac7bf4b569a0c2d119c7a0f66f649cfb7bceae8625b
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/api/auth/userpass/go.mod) = 1066
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/sdk/go.mod) = 01a6a81f8d8aee7b693f6e0c9755cb082e594f837013f70ccd3fae3beddd15a3
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/sdk/go.mod) = 6753
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/vault-web_ui-1.21.0.tar.gz) = 4034b71d87f5899ab6a21323b4c74b1fb9c248a3fb08836f80dd1bd51edd97d9
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/vault-web_ui-1.21.0.tar.gz) = 3589747
-SHA256 (go/security_vault/hashicorp-vault-v1.21.0_GH0/hashicorp-vault-v1.21.0_GH0.tar.gz) = 1b89da30b0c2fc749c665acdf5847ee1e4950a525df003311f1290d73a092af5
-SIZE (go/security_vault/hashicorp-vault-v1.21.0_GH0/hashicorp-vault-v1.21.0_GH0.tar.gz) = 8620241
+TIMESTAMP = 1764319255
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/go.mod) = b54385430c833ed37c535cf281a471cb9a66c64b6dee54377a58c2f129b2276b
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/go.mod) = 30903
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/go.mod) = 33cc166974ba0a2adb7213ea1800f20595dfd56b90ea792f4cde7d3ec815a18e
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/go.mod) = 1639
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/auth/approle/go.mod) = d5418ba4a08ac82d8396c6322ad275a16bd1566a4701c5e13c30be3dbd2ea7d3
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/auth/approle/go.mod) = 1045
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/auth/kubernetes/go.mod) = 048aaeef560f39211223a41b9d65ef9ed90ab8c22f7f16ad2dd31f660738bf15
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/auth/kubernetes/go.mod) = 1048
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/auth/userpass/go.mod) = 36cd9865998d5c3a8dd7029efc5cc337143fe7dbc30964bb4c9ae4a8e17baf1c
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/api/auth/userpass/go.mod) = 1046
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/sdk/go.mod) = c06012c168aeaa1ce1e38c7db020e4a8ecf41dc98e786fd3496675ea178a26f3
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/sdk/go.mod) = 6753
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/vault-web_ui-1.21.1.tar.gz) = 46f34e0a6f960c9ab3ab319b224fbe0cfddb328ef896635abcb6aaaa4ed48f8f
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/vault-web_ui-1.21.1.tar.gz) = 3578304
+SHA256 (go/security_vault/hashicorp-vault-v1.21.1_GH0/hashicorp-vault-v1.21.1_GH0.tar.gz) = d9f15d75fa4beee3a2faf26dfec860122c94b87139f65a5ed826a9934f0b2a42
+SIZE (go/security_vault/hashicorp-vault-v1.21.1_GH0/hashicorp-vault-v1.21.1_GH0.tar.gz) = 8668958