diff --git a/sysutils/cfengine-masterfiles-devel/Makefile b/sysutils/cfengine-masterfiles-devel/Makefile
index 4ce04920f499..73ade5c4eb77 100644
--- a/sysutils/cfengine-masterfiles-devel/Makefile
+++ b/sysutils/cfengine-masterfiles-devel/Makefile
@@ -1,37 +1,37 @@
 PORTNAME=	cfengine-masterfiles
-PORTVERSION=	3.25.${CFENGINE_COMMIT_DATE}
+PORTVERSION=	3.28.${CFENGINE_COMMIT_DATE}
 PORTEPOCH=	1
 CATEGORIES=	sysutils
 PKGNAMESUFFIX=	-devel
-HASH=		09255066
-CFENGINE_COMMIT_DATE=	20251117
+HASH=		67d60021
+CFENGINE_COMMIT_DATE=	20260113
 
 MAINTAINER=	cy@FreeBSD.org
 COMMENT=	cfengine sample policies for installations and upgrades
 WWW=		https://cfengine.com/
 
 LICENSE=	GPLv3
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	cfengine
 GH_PROJECT=	masterfiles
 GH_TAGNAME=	${HASH}
 CPE_VENDOR=	gnu
 CPE_PRODUCT=	cfengine
 
 CONFLICTS=	cfengine-masterfiles3[0-9]-* cfengine-masterfiles31[02-9]-* \
 		cfengine-masterfiles-3.*
 
 RUN_DEPENDS=	cf-agent:sysutils/cfengine${PKGNAMESUFFIX}
 
 FETCH_BEFORE_ARGS=	-o ${DISTDIR}/${DISTFILES}
 
 MAKE_JOBS_UNSAFE=	yes
 USES=		autoreconf:build cpe gmake python:build
 HAS_CONFIGURE=	yes
 EXAMPLESDIR=	${PREFIX}/share/examples/cfengine-masterfiles
 CONFIGURE_SCRIPT=	./autogen.sh
 CONFIGURE_ARGS=	--prefix=${EXAMPLESDIR}
 CONFIGURE_ENV=	EXPLICIT_VERSION=${PORTVERSION}-${HASH}
 
 .include <bsd.port.mk>
diff --git a/sysutils/cfengine-masterfiles-devel/distinfo b/sysutils/cfengine-masterfiles-devel/distinfo
index 06a64209c042..82de182051e5 100644
--- a/sysutils/cfengine-masterfiles-devel/distinfo
+++ b/sysutils/cfengine-masterfiles-devel/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1763394159
-SHA256 (cfengine-masterfiles-3.25.20251117-09255066_GH0.tar.gz) = ac2abe399c9cd977d0f9876c0fcc319310beabd27876d1f5108c3861dcbeb95a
-SIZE (cfengine-masterfiles-3.25.20251117-09255066_GH0.tar.gz) = 516970
+TIMESTAMP = 1768317264
+SHA256 (cfengine-masterfiles-3.28.20260113-67d60021_GH0.tar.gz) = a4cbbf52a2d2c2fb098e79396ca8124c5e9a9714f5349b974063e4191d9d66fc
+SIZE (cfengine-masterfiles-3.28.20260113-67d60021_GH0.tar.gz) = 517927