diff --git a/security/py-tuf/Makefile b/security/py-tuf/Makefile
index 5d8d6bc76c14..30a629a08a38 100644
--- a/security/py-tuf/Makefile
+++ b/security/py-tuf/Makefile
@@ -1,29 +1,31 @@
 PORTNAME=	tuf
-PORTVERSION=	2.0.0
+PORTVERSION=	2.1.0
 CATEGORIES=	security devel python
 MASTER_SITES=	PYPI
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Framework for securing software update systems
 WWW=		https://www.updateframework.com
 
 LICENSE=	APACHE20 MIT
 LICENSE_COMB=	dual
 LICENSE_FILE_APACHE20=	${WRKSRC}/LICENSE
 LICENSE_FILE_MIT=	${WRKSRC}/LICENSE-MIT
 
+BUILD_DEPENDS=	${PYTHON_PKGNAMEPREFIX}hatchling>0:devel/py-hatchling@${PY_FLAVOR}
 RUN_DEPENDS=	${PYTHON_PKGNAMEPREFIX}requests>=2.19.1:www/py-requests@${PY_FLAVOR} \
 		${PYTHON_PKGNAMEPREFIX}securesystemslib>=0.22.0:security/py-securesystemslib@${PY_FLAVOR}
 
 USES=		pytest python:3.7+
-USE_PYTHON=	autoplist concurrent distutils
+USE_PYTHON=	autoplist concurrent pep517
 
 NO_ARCH=	yes
 
 PYTEST_BROKEN_TESTS=	test_cleanup TestRepoExamples # uses files missing from pypi distribution
 
 post-patch:
-	@${RM} ${WRKSRC}/pyproject.toml
+	@${REINPLACE_CMD} 's|hatchling==1.11.1|hatchling>=1.11.1|g' \
+		${WRKSRC}/pyproject.toml
 
 .include <bsd.port.mk>
diff --git a/security/py-tuf/distinfo b/security/py-tuf/distinfo
index 0746b1d21b37..9067c9e93e7e 100644
--- a/security/py-tuf/distinfo
+++ b/security/py-tuf/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1661861865
-SHA256 (tuf-2.0.0.tar.gz) = 76e7f2a7aced84466865fac2a7127b6085afae51d4328af896fb46f952dd3a53
-SIZE (tuf-2.0.0.tar.gz) = 255819
+TIMESTAMP = 1675279500
+SHA256 (tuf-2.1.0.tar.gz) = dbfe18fbdeba6d76144931db88b76e473fa40c431b60d25b455a9adbb07c2397
+SIZE (tuf-2.1.0.tar.gz) = 261568