diff --git a/security/lego/Makefile b/security/lego/Makefile
index 19193237a1bc..5b6059fd374a 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,44 +1,43 @@
 PORTNAME=	lego
 DISTVERSIONPREFIX=	v
-DISTVERSION=	5.2.2
-PORTREVISION=	1
+DISTVERSION=	5.3.1
 CATEGORIES=	security
 
 MAINTAINER=	matt@matthoran.com
 COMMENT=	Let's Encrypt client and ACME library written in Go
 WWW=		https://github.com/go-acme/lego
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
-USES=		go:modules
+USES=		go:1.25+,modules
 GO_MODULE=	github.com/go-acme/lego/v5
-GO_BUILDFLAGS=	-ldflags '-X "main.version=${DISTVERSION}"'
+GO_LDFLAGS=	-X main.version=${DISTVERSION}
 
 SAMPLE_FILES=	deploy.sh.sample lego.sh.sample lego.yml.sample
 SUB_FILES=	${SAMPLE_FILES} 604.lego pkg-message
 SUB_LIST=	LEGO_USER=${LEGO_USER} \
 		PORTNAME=${PORTNAME}
 
 LEGO_USER?=	_lego
 .if ${LEGO_USER} == _lego
 USERS=		${LEGO_USER}
 GROUPS=		${LEGO_USER}
 .endif
 GROUPS+=	www
 PLIST_SUB=	LEGO_USER=${LEGO_USER}
 
 PERIODIC_DIRS=	etc/periodic/weekly
 PERIODIC_FILES=	604.lego
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS} \
 		 ${STAGEDIR}${PREFIX}/etc/ssl/lego \
 		 ${STAGEDIR}${ETCDIR} \
 		 ${STAGEDIR}${WWWDIR}
 	${INSTALL_SCRIPT} ${WRKDIR}/${PERIODIC_FILES} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}
 	${INSTALL_SCRIPT} ${SAMPLE_FILES:C|^|${WRKDIR}/|} ${STAGEDIR}${ETCDIR}
 
 .include <bsd.port.mk>
diff --git a/security/lego/distinfo b/security/lego/distinfo
index 32138e95f986..d74478b655ae 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1780757670
-SHA256 (go/security_lego/lego-v5.2.2/v5.2.2.mod) = b27760ca7d3f57ccd0f6c1252358420faa83a886fd477f53e4ed82940d02a2e4
-SIZE (go/security_lego/lego-v5.2.2/v5.2.2.mod) = 10895
-SHA256 (go/security_lego/lego-v5.2.2/v5.2.2.zip) = cda09848095f390e2d48cd9b07739aacb08c4eefe0bf099f4af6093d86171e08
-SIZE (go/security_lego/lego-v5.2.2/v5.2.2.zip) = 2410470
+TIMESTAMP = 1784985237
+SHA256 (go/security_lego/lego-v5.3.1/v5.3.1.mod) = 24f0661e77e013bd849430bdf9f898027a71e0ff682815925842d6151c23d288
+SIZE (go/security_lego/lego-v5.3.1/v5.3.1.mod) = 10898
+SHA256 (go/security_lego/lego-v5.3.1/v5.3.1.zip) = f27c6474d926d642da08bbb184d1a08a16653bdc2be99451f11a6e8f64e67eab
+SIZE (go/security_lego/lego-v5.3.1/v5.3.1.zip) = 2426292