diff --git a/security/headscale/Makefile b/security/headscale/Makefile
index 3153236b7074..f02eb5650fa8 100644
--- a/security/headscale/Makefile
+++ b/security/headscale/Makefile
@@ -1,45 +1,44 @@
 PORTNAME=	headscale
-PORTVERSION=	0.25.1
+PORTVERSION=	0.26.1
 DISTVERSIONPREFIX=	v
-PORTREVISION=	1
 CATEGORIES=	security net-vpn
 
 MAINTAINER=	m.muenz@gmail.com
 COMMENT=	Mesh VPN that makes it easy to connect your devices
 WWW=		https://github.com/juanfont/headscale
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BROKEN_armv6=	fails to compile: modernc.org/libc
 BROKEN_armv7=	fails to compile: modernc.org/libc
 
 RUN_DEPENDS=	ca_root_nss>0:security/ca_root_nss
 
-USES=		go:1.23,modules
+USES=		go:modules
 USE_RC_SUBR=	headscale
 
 GO_MODULE=	github.com/juanfont/headscale
 
 GO_TARGET=	./cmd/headscale
 
 PLIST_FILES=	"@sample ${ETCDIR}/config.yaml.sample" \
 		"@dir /var/cache/${PORTNAME}" \
 		"@dir /var/db/${PORTNAME}" \
 		bin/${PORTNAME}
 
 post-patch:
 	@${REINPLACE_CMD} -e 's|/etc/headscale|${PREFIX}/etc/${PORTNAME}|g' \
 		${WRKSRC}/cmd/headscale/cli/dump_config.go \
 		${WRKSRC}/cmd/headscale/cli/root.go \
 		${WRKSRC}/integration/hsic/hsic.go
 	@${REINPLACE_CMD} -e 's|/var/lib/headscale/db.sqlite|/var/db/${PORTNAME}/db.sqlite|g' \
 		${WRKSRC}/config-example.yaml
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/${PORTNAME}
 	${INSTALL_DATA} ${WRKSRC}/config-example.yaml ${STAGEDIR}${PREFIX}/etc/${PORTNAME}/config.yaml.sample
 	${MKDIR} ${STAGEDIR}/var/db/${PORTNAME}
 	${MKDIR} ${STAGEDIR}/var/cache/${PORTNAME}
 
 .include <bsd.port.mk>
diff --git a/security/headscale/distinfo b/security/headscale/distinfo
index adec007d4293..3a251deb0063 100644
--- a/security/headscale/distinfo
+++ b/security/headscale/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1742783005
-SHA256 (go/security_headscale/headscale-v0.25.1/v0.25.1.mod) = 183068553944164d72939603f451063ff16cca34c7cf424a1f6745603dac50a0
-SIZE (go/security_headscale/headscale-v0.25.1/v0.25.1.mod) = 11476
-SHA256 (go/security_headscale/headscale-v0.25.1/v0.25.1.zip) = 3eed2c1b3e063a65b8a4c043596843457f729410ee9e5a2116e945676e2bd409
-SIZE (go/security_headscale/headscale-v0.25.1/v0.25.1.zip) = 724334
+TIMESTAMP = 1749445449
+SHA256 (go/security_headscale/headscale-v0.26.1/v0.26.1.mod) = 5acc4e00f3630fe9d497b33fde639d6bab5c02a05fb849485cec904c00dfef36
+SIZE (go/security_headscale/headscale-v0.26.1/v0.26.1.mod) = 11373
+SHA256 (go/security_headscale/headscale-v0.26.1/v0.26.1.zip) = 6890e3fa1e74b71eb6b18fffae1dfb824fa3b7779a5c7a2b64fcfdee89ba723c
+SIZE (go/security_headscale/headscale-v0.26.1/v0.26.1.zip) = 764768
diff --git a/security/headscale/pkg-message b/security/headscale/pkg-message
index 45db5a2a5ae4..c3d94d510f9f 100644
--- a/security/headscale/pkg-message
+++ b/security/headscale/pkg-message
@@ -1,13 +1,23 @@
 [
 {
   type: upgrade
   maximum_version: "0.23.0"
   message: <<EOM
 Headscale has breaking changes on OIDC, MagicDNS and
 Authentication flow since 0.23.0, check
 https://github.com/juanfont/headscale/releases/tag/v0.24.0
 and https://github.com/juanfont/headscale/releases/tag/v0.25.0
 for details.
 EOM
 }
+{
+  type: upgrade
+  maximum_version: "0.25.1"
+  message: <<EOM
+Headscale has breaking changes on Routes, Policy and
+Configration, Authentication flow since 0.25.1, check
+https://github.com/juanfont/headscale/releases/tag/v0.26.0
+for details.
+EOM
+}
 ]