diff --git a/security/vault/Makefile b/security/vault/Makefile
index 6f328e951d10..72e8c225ea1b 100644
--- a/security/vault/Makefile
+++ b/security/vault/Makefile
@@ -1,69 +1,69 @@
 PORTNAME=	vault
-DISTVERSION=	1.16.1
+DISTVERSION=	1.16.2
 DISTVERSIONPREFIX=	v
 CATEGORIES=	security
 MASTER_SITES=	https://raw.githubusercontent.com/hashicorp/vault/${DISTVERSIONFULL}/ \
 		LOCAL/bofh/security/${PORTNAME}/:web_ui
 DISTFILES=	go.mod \
 		api/go.mod \
 		api/auth/approle/go.mod \
 		api/auth/kubernetes/go.mod \
 		api/auth/userpass/go.mod \
 		sdk/go.mod \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX}:web_ui
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Tool for securely accessing secrets
 WWW=		https://vaultproject.io/
 
 LICENSE=	MPL20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 .if defined(MAINTAINER_MODE)
 EXTRACT_DEPENDS=npm-node18>0:www/npm-node18 \
 		yarn-node18>0:www/yarn-node18
 .endif
 
 USES=		cpe go:modules
 CPE_VENDOR=	hashicorp
 USE_GITHUB=	yes
 GH_ACCOUNT=	hashicorp
 USE_RC_SUBR=	vault
 
 GO_MODULE=	github.com/hashicorp/vault
 GO_BUILDFLAGS=	-ldflags="-s \
 		-X github.com/hashicorp/vault/version.GitCommit=${GITID} \
 		-X github.com/hashicorp/vault/version.BuildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}} \
 		" -tags "vault ui"
 
 SUB_FILES=	pkg-message
 
 USERS=		vault
 GROUPS=		vault
 
 PLIST_FILES=	bin/${PORTNAME}
 
-GITID=	c20eae3e84c55bf5180ac890b83ee81c9d7ded8b
+GITID=	c6e4c2d4dc3b0d57791881b087c026e2f75a87cb
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-patch:
 	${CP} -Rf ${WRKDIR}/web_ui ${WRKSRC}/http/
 
 .if defined(MAINTAINER_MODE)
 _make-web_ui: extract
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} npm rebuild node-sass
 	cd ${WRKSRC}/ui && ${SETENV} ${MAKE_ENV} yarn run build
 	cd ${WRKDIR} && ${TAR} -czf \
 		${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} -C ${WRKSRC}/http web_ui
 	scp ${WRKDIR}/${PORTNAME}-web_ui-${DISTVERSION}${EXTRACT_SUFX} \
 		bofh@freefall.freebsd.org:public_distfiles/security/${PORTNAME}/
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/vault/distinfo b/security/vault/distinfo
index 03436aba2c5a..2a2a723e560e 100644
--- a/security/vault/distinfo
+++ b/security/vault/distinfo
@@ -1,17 +1,17 @@
-TIMESTAMP = 1727620978
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/go.mod) = 90389f48a4b07fa4eac538cbdfdbbe06ca7aec6ff4cc9bb4bbbf56e9a8de5de9
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/go.mod) = 28847
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/go.mod) = e76a028c97d18f2da27e4d805d6fda9ae46ea1071c92936d27616eb34ef63215
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/go.mod) = 1632
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/auth/approle/go.mod) = 960c8e41ba93367870814a6e42069b4088aa8eba5267ce93cb71a5bcac463a01
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/auth/approle/go.mod) = 108
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/auth/kubernetes/go.mod) = 84de95d1cf2fa1b1aa2c4d6b5bf17f97f988f4da5d1ce866343a4c597976f45b
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/auth/kubernetes/go.mod) = 111
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/auth/userpass/go.mod) = eda0fdfd48720c3d59332f57ecdd4a55614017c6ec8e3e6dcba3544a23e02a34
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/api/auth/userpass/go.mod) = 109
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/sdk/go.mod) = 67e05f15f375c2023ed9673f9677248bb66ad9b0a58df2386c669e8b229c9495
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/sdk/go.mod) = 5223
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/vault-web_ui-1.16.1.tar.gz) = 5654dfc1a1e1aa7b5f87a55479a4cf14c06dac58c045ffd23b984883d38ac902
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/vault-web_ui-1.16.1.tar.gz) = 3003899
-SHA256 (go/security_vault/hashicorp-vault-v1.16.1_GH0/hashicorp-vault-v1.16.1_GH0.tar.gz) = d2066537b6aa6ecc7b43baeac5b321c2a94e28d365f12fe2987e3d7ef485d719
-SIZE (go/security_vault/hashicorp-vault-v1.16.1_GH0/hashicorp-vault-v1.16.1_GH0.tar.gz) = 32997180
+TIMESTAMP = 1727835450
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/go.mod) = 181a1796a1e7426855585b6d5d99edb5f3fc364860810de9b8e08b4aa0050052
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/go.mod) = 28895
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/go.mod) = e76a028c97d18f2da27e4d805d6fda9ae46ea1071c92936d27616eb34ef63215
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/go.mod) = 1632
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/auth/approle/go.mod) = 960c8e41ba93367870814a6e42069b4088aa8eba5267ce93cb71a5bcac463a01
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/auth/approle/go.mod) = 108
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/auth/kubernetes/go.mod) = 84de95d1cf2fa1b1aa2c4d6b5bf17f97f988f4da5d1ce866343a4c597976f45b
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/auth/kubernetes/go.mod) = 111
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/auth/userpass/go.mod) = eda0fdfd48720c3d59332f57ecdd4a55614017c6ec8e3e6dcba3544a23e02a34
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/api/auth/userpass/go.mod) = 109
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/sdk/go.mod) = 67e05f15f375c2023ed9673f9677248bb66ad9b0a58df2386c669e8b229c9495
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/sdk/go.mod) = 5223
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/vault-web_ui-1.16.2.tar.gz) = d514bdad44bca01f3b2f4de3582e09bb8bf23382c624f597b1f11dd8b1a1306c
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/vault-web_ui-1.16.2.tar.gz) = 2949376
+SHA256 (go/security_vault/hashicorp-vault-v1.16.2_GH0/hashicorp-vault-v1.16.2_GH0.tar.gz) = dc963d18bae1364ccbd98968bd435a5488c5e6cf2e6b6bd50c84105645e8ee99
+SIZE (go/security_vault/hashicorp-vault-v1.16.2_GH0/hashicorp-vault-v1.16.2_GH0.tar.gz) = 33308182