diff --git a/security/vault/Makefile b/security/vault/Makefile
index ee72a2eeae66..590a93f11d40 100644
--- a/security/vault/Makefile
+++ b/security/vault/Makefile
@@ -1,73 +1,72 @@
 PORTNAME=	vault
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.20.1
-PORTREVISION=	1
+DISTVERSION=	1.20.2
 CATEGORIES=	security
 MASTER_SITES=	https://raw.githubusercontent.com/hashicorp/vault/${DISTVERSIONFULL}/ \
 		LOCAL/bofh/security/${PORTNAME}/:web_ui
 DISTFILES=	go.mod \
 		api/go.mod \
 		api/auth/approle/go.mod \
 		api/auth/kubernetes/go.mod \
 		api/auth/userpass/go.mod \
 		sdk/go.mod \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX}:web_ui
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Tool for securely accessing secrets
 WWW=		https://vaultproject.io/
 
 NOT_FOR_ARCHS=	armv7 i386
 NOT_FOR_ARCHS_REASON=	fatal error: out of memory
 
 LICENSE=	MPL20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 .if defined(MAINTAINER_MODE)
 EXTRACT_DEPENDS=npm-node20>0:www/npm-node20 \
 		yarn-node20>0:www/yarn-node20
 .endif
 
 USES=		cpe go:modules
 CPE_VENDOR=	hashicorp
 USE_GITHUB=	yes
 GH_ACCOUNT=	hashicorp
 USE_RC_SUBR=	vault
 
 GO_MODULE=	github.com/hashicorp/vault
 GO_BUILDFLAGS=	-ldflags="-s \
 		-X github.com/hashicorp/vault/version.GitCommit=${GITID} \
 		-X github.com/hashicorp/vault/version.BuildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}} \
 		" -tags "vault ui"
 
 SUB_FILES=	pkg-message
 
 USERS=		vault
 GROUPS=		vault
 
 PLIST_FILES=	bin/${PORTNAME}
 
-GITID=	b403b1a27c8db6038ffefb296d7be0962e08039d
+GITID=	824d12909d5b596ddd3f34d9c8f169b4f9701a0c
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-patch:
 	${CP} -Rf ${WRKDIR}/web_ui ${WRKSRC}/http/
 
 .if defined(MAINTAINER_MODE)
-_make-web_ui: extract
+_make-web_ui: clean extract
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} npm rebuild node-sass
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn run build
 	cd ${WRKDIR} && ${TAR} -czf \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} -C ${WRKSRC}/http web_ui
 	scp ${WRKDIR}/${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} \
 		bofh@freefall.freebsd.org:public_distfiles/security/${PORTNAME}/
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/vault/distinfo b/security/vault/distinfo
index 4c4993013a29..c17babae63fa 100644
--- a/security/vault/distinfo
+++ b/security/vault/distinfo
@@ -1,17 +1,17 @@
-TIMESTAMP = 1753447248
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/go.mod) = c8f1b608608d7aa2d2d00b12f70708f660e2bccc3c42bfbafeac735f16182958
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/go.mod) = 30389
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/go.mod) = c0d25838a7b72c0a5450c0c346e22eea9d24074c637f99e13941fd74980330e5
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/go.mod) = 1659
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/auth/approle/go.mod) = 94d14c8d7b0e143e5cda121829d639935bcd5bab9cc4961ca4ac432ec675a5b9
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/auth/approle/go.mod) = 1065
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/auth/kubernetes/go.mod) = bb4af50f74cdf95fd886651b1911dff90e118c62270497102ce144f5c76c9b1d
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/auth/kubernetes/go.mod) = 1068
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/auth/userpass/go.mod) = e92fff72dd8294c27b29ba8fc653d28edf322d8f59d98258ea87691dd5777b56
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/api/auth/userpass/go.mod) = 1066
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/sdk/go.mod) = a3da120c91c4a0a9a2ad7e2fac36034da35a1527668359a6c9f19800aa88f2f1
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/sdk/go.mod) = 6759
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/vault-web_ui-1.20.1.tar.gz) = e1d18425e75765ec86e969dfa48a96b00efe6b49d5e645efc728bb53118ca02d
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/vault-web_ui-1.20.1.tar.gz) = 3586905
-SHA256 (go/security_vault/hashicorp-vault-v1.20.1_GH0/hashicorp-vault-v1.20.1_GH0.tar.gz) = 48b2accd96118c0c239019d7c6017cddebc7ef80ef1f8191d4836865e395302b
-SIZE (go/security_vault/hashicorp-vault-v1.20.1_GH0/hashicorp-vault-v1.20.1_GH0.tar.gz) = 41636436
+TIMESTAMP = 1754685277
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/go.mod) = cd83bd31fc0bfb55d172ae8fc8f8bc3930bc52602a5b73b2cccbf5428e144241
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/go.mod) = 30390
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/go.mod) = c0d25838a7b72c0a5450c0c346e22eea9d24074c637f99e13941fd74980330e5
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/go.mod) = 1659
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/approle/go.mod) = 94d14c8d7b0e143e5cda121829d639935bcd5bab9cc4961ca4ac432ec675a5b9
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/approle/go.mod) = 1065
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/kubernetes/go.mod) = bb4af50f74cdf95fd886651b1911dff90e118c62270497102ce144f5c76c9b1d
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/kubernetes/go.mod) = 1068
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/userpass/go.mod) = e92fff72dd8294c27b29ba8fc653d28edf322d8f59d98258ea87691dd5777b56
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/api/auth/userpass/go.mod) = 1066
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/sdk/go.mod) = a3da120c91c4a0a9a2ad7e2fac36034da35a1527668359a6c9f19800aa88f2f1
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/sdk/go.mod) = 6759
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/vault-web_ui-1.20.2.tar.gz) = 5d6a244ae81312a78c847abeec525a01cfe92fdf2f7df6d812a884f14561cc96
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/vault-web_ui-1.20.2.tar.gz) = 3584329
+SHA256 (go/security_vault/hashicorp-vault-v1.20.2_GH0/hashicorp-vault-v1.20.2_GH0.tar.gz) = cff7c65f4cfdebbf2a419e77debe5dda1abd93d48f673e8bbbd4c5e5161233e2
+SIZE (go/security_vault/hashicorp-vault-v1.20.2_GH0/hashicorp-vault-v1.20.2_GH0.tar.gz) = 41645004