diff --git a/security/vault/Makefile b/security/vault/Makefile
index 26f136ad5d94..551f5e25ccba 100644
--- a/security/vault/Makefile
+++ b/security/vault/Makefile
@@ -1,69 +1,69 @@
 PORTNAME=	vault
-DISTVERSION=	1.17.2
+DISTVERSION=	1.17.3
 DISTVERSIONPREFIX=	v
 CATEGORIES=	security
 MASTER_SITES=	https://raw.githubusercontent.com/hashicorp/vault/${DISTVERSIONFULL}/ \
 		LOCAL/bofh/security/${PORTNAME}/:web_ui
 DISTFILES=	go.mod \
 		api/go.mod \
 		api/auth/approle/go.mod \
 		api/auth/kubernetes/go.mod \
 		api/auth/userpass/go.mod \
 		sdk/go.mod \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX}:web_ui
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Tool for securely accessing secrets
 WWW=		https://vaultproject.io/
 
 LICENSE=	MPL20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 .if defined(MAINTAINER_MODE)
 EXTRACT_DEPENDS=npm-node20>0:www/npm-node20 \
 		yarn-node20>0:www/yarn-node20
 .endif
 
 USES=		cpe go:1.22,modules
 CPE_VENDOR=	hashicorp
 USE_GITHUB=	yes
 GH_ACCOUNT=	hashicorp
 USE_RC_SUBR=	vault
 
 GO_MODULE=	github.com/hashicorp/vault
 GO_BUILDFLAGS=	-ldflags="-s \
 		-X github.com/hashicorp/vault/version.GitCommit=${GITID} \
 		-X github.com/hashicorp/vault/version.BuildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}} \
 		" -tags "vault ui"
 
 SUB_FILES=	pkg-message
 
 USERS=		vault
 GROUPS=		vault
 
 PLIST_FILES=	bin/${PORTNAME}
 
-GITID=	2af5655e364f697a15b1dc2db2c3f85f6ef949f2
+GITID=	c91c85442144e1228c02123fc4b19337f7d52700
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-patch:
 	${CP} -Rf ${WRKDIR}/web_ui ${WRKSRC}/http/
 
 .if defined(MAINTAINER_MODE)
 _make-web_ui: extract
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} npm rebuild node-sass
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn run build
 	cd ${WRKDIR} && ${TAR} -czf \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} -C ${WRKSRC}/http web_ui
 	scp ${WRKDIR}/${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} \
 		bofh@freefall.freebsd.org:public_distfiles/security/${PORTNAME}/
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/vault/distinfo b/security/vault/distinfo
index 54d3ce58374d..c468e507a209 100644
--- a/security/vault/distinfo
+++ b/security/vault/distinfo
@@ -1,17 +1,17 @@
-TIMESTAMP = 1728365067
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/go.mod) = 565772e13215b2fbc9a1052b9ec62e12ce673781667279817e3864edf61b39a4
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/go.mod) = 28629
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/go.mod) = e8171bf9943c9388eb5233e7cdd18a93574241f57e62f0dd94ade93007f8bf96
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/go.mod) = 1675
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/auth/approle/go.mod) = 9a1177a5d7333ba625d79e740e160b499bacdb83522ac697256a520b96c9b1ee
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/auth/approle/go.mod) = 1082
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/auth/kubernetes/go.mod) = 9d3d4eb2c0c82433b3b175b4f67848b00728fdf2b40c0be54dabe60de578378b
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/auth/kubernetes/go.mod) = 1085
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/auth/userpass/go.mod) = 55be1e7cf64964ebd2b04ab8c731ba9b6e44081563db799df7e0372bdd225014
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/api/auth/userpass/go.mod) = 1083
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/sdk/go.mod) = f734fae4f309ed37c8da664dd950bed337abd6f1f1fdbde027e5c842495fddfb
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/sdk/go.mod) = 5738
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/vault-web_ui-1.17.2.tar.gz) = 76b1b23ddd293856d0a24aa6a28c0b51130361ac5ad76116f3017e6c8bab75d1
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/vault-web_ui-1.17.2.tar.gz) = 2984343
-SHA256 (go/security_vault/hashicorp-vault-v1.17.2_GH0/hashicorp-vault-v1.17.2_GH0.tar.gz) = 492820ab3c3873d157c5d054456bcbfa1f8487f51474c97c238ad3db3e098f6c
-SIZE (go/security_vault/hashicorp-vault-v1.17.2_GH0/hashicorp-vault-v1.17.2_GH0.tar.gz) = 33539974
+TIMESTAMP = 1728560599
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/go.mod) = 365b069f29bd740a0f7e72043a13061239a5b1f0743f0bafee7b1ce6f31d1b72
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/go.mod) = 28678
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/go.mod) = e8171bf9943c9388eb5233e7cdd18a93574241f57e62f0dd94ade93007f8bf96
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/go.mod) = 1675
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/auth/approle/go.mod) = 9a1177a5d7333ba625d79e740e160b499bacdb83522ac697256a520b96c9b1ee
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/auth/approle/go.mod) = 1082
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/auth/kubernetes/go.mod) = 9d3d4eb2c0c82433b3b175b4f67848b00728fdf2b40c0be54dabe60de578378b
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/auth/kubernetes/go.mod) = 1085
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/auth/userpass/go.mod) = 55be1e7cf64964ebd2b04ab8c731ba9b6e44081563db799df7e0372bdd225014
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/api/auth/userpass/go.mod) = 1083
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/sdk/go.mod) = f734fae4f309ed37c8da664dd950bed337abd6f1f1fdbde027e5c842495fddfb
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/sdk/go.mod) = 5738
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/vault-web_ui-1.17.3.tar.gz) = ef827b80d67694cabd6d882d008078ebe591780f01b61e8526d82b3b08d7e143
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/vault-web_ui-1.17.3.tar.gz) = 2981772
+SHA256 (go/security_vault/hashicorp-vault-v1.17.3_GH0/hashicorp-vault-v1.17.3_GH0.tar.gz) = c0e8f2bccf63f5850dc4643e6a50cf914d46e6a2d2a89a48a64b5cc9d216948a
+SIZE (go/security_vault/hashicorp-vault-v1.17.3_GH0/hashicorp-vault-v1.17.3_GH0.tar.gz) = 33565884