diff --git a/security/boringssl/Makefile b/security/boringssl/Makefile
index 118a775909f3..d74761a2df27 100644
--- a/security/boringssl/Makefile
+++ b/security/boringssl/Makefile
@@ -1,48 +1,47 @@
 PORTNAME=	boringssl
-PORTVERSION=	0.20260413.0
-PORTREVISION=	1
+PORTVERSION=	0.20260508.0
 CATEGORIES=	security
 EXTRACT_ONLY=	${GH_ACCOUNT}-${PORTNAME}-${PORTVERSION}_GH0.tar.gz
 
 MAINTAINER=	osa@FreeBSD.org
 COMMENT=	Fork of OpenSSL
 WWW=		https://boringssl.googlesource.com/boringssl/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-USES=		cmake:insource cpe go:1.24+,no_targets localbase perl5
+USES=		cmake:insource cpe go:1.25,no_targets localbase perl5
 
 CONFLICTS_INSTALL=	libressl libressl-devel openssl openssl111 \
 			openssl3[23456] openssl-quictls openssl33-quictls
 
 CPE_VENDOR=	google
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	google
 CMAKE_ARGS+=	-DBUILD_SHARED_LIBS=1
 
 CFLAGS_i386=	-msse2
 USE_LDCONFIG=	yes
 LDFLAGS+=	-Wl,-rpath,${LOCALBASE}/lib
 TEST_TARGET=	run_tests
 MAKE_ENV+=	GOFLAGS=-mod=readonly \
 		GOPROXY=file://${DISTDIR}
 
 .include <bsd.port.pre.mk>
 
 .if ${.TARGETS} == "makesum" || ${.TARGETS} == "test"
 MASTER_SITES+=	https://proxy.golang.org/:gomods
 DISTFILES+=	filippo.io/edwards25519/@v/v1.2.0.zip:gomods \
 		filippo.io/edwards25519/@v/v1.2.0.mod:gomods \
 		golang.org/x/crypto/@v/v0.43.0.zip:gomods \
 		golang.org/x/crypto/@v/v0.43.0.mod:gomods \
 		golang.org/x/sys/@v/v0.37.0.zip:gomods \
 		golang.org/x/sys/@v/v0.37.0.mod:gomods
 .endif
 
 post-install:
 	${LN} -sf libcrypto.so.1 ${STAGEDIR}${PREFIX}/lib/libcrypto.so.1.0.0
 	${LN} -sf libssl.so.1 ${STAGEDIR}${PREFIX}/lib/libssl.so.1.0.0
 
 .include <bsd.port.post.mk>
diff --git a/security/boringssl/distinfo b/security/boringssl/distinfo
index a53c50c4f1f8..df6ef092a15a 100644
--- a/security/boringssl/distinfo
+++ b/security/boringssl/distinfo
@@ -1,15 +1,15 @@
-TIMESTAMP = 1776261535
+TIMESTAMP = 1778432773
 SHA256 (filippo.io/edwards25519/@v/v1.2.0.zip) = 98f2d3ca9b88daa031b0fb2fb521b7ea386af1fed61b6f445a20bef7fa381c17
 SIZE (filippo.io/edwards25519/@v/v1.2.0.zip) = 56057
 SHA256 (filippo.io/edwards25519/@v/v1.2.0.mod) = 7492c767dc361b86e96933ca1790d492c2f7c368c3ec0e00e1050eddad7baa7d
 SIZE (filippo.io/edwards25519/@v/v1.2.0.mod) = 42
 SHA256 (golang.org/x/crypto/@v/v0.43.0.zip) = 0b11e4f2ac759849fc2567213e22e7dcb2e1bfe9755aca46c95d8d253f3c610b
 SIZE (golang.org/x/crypto/@v/v0.43.0.zip) = 2233740
 SHA256 (golang.org/x/crypto/@v/v0.43.0.mod) = d83331446e98865733a1bd882774bd2f23d69dd3500adb5c7f79832b51cdd95b
 SIZE (golang.org/x/crypto/@v/v0.43.0.mod) = 192
 SHA256 (golang.org/x/sys/@v/v0.37.0.zip) = 6c87bb94ec328b6d6234ad02cf2813225fe3bd5f8929fe85775ca06e01cfcc78
 SIZE (golang.org/x/sys/@v/v0.37.0.zip) = 1998239
 SHA256 (golang.org/x/sys/@v/v0.37.0.mod) = f411814d83a96e86781b1dee41c125b9504da5422dba37cc1d63b016ae39cfe2
 SIZE (golang.org/x/sys/@v/v0.37.0.mod) = 35
-SHA256 (google-boringssl-0.20260413.0_GH0.tar.gz) = 3560f7dd3f08e16b9f84d877a5be21ec62071564783009571af5fcc6fad734d2
-SIZE (google-boringssl-0.20260413.0_GH0.tar.gz) = 70098624
+SHA256 (google-boringssl-0.20260508.0_GH0.tar.gz) = de3371d3fe085afd34778a4c988fb7840b9c92cb21504e674f33ebefd98edc00
+SIZE (google-boringssl-0.20260508.0_GH0.tar.gz) = 70378862
diff --git a/security/boringssl/files/patch-CMakeLists.txt b/security/boringssl/files/patch-CMakeLists.txt
index 7903e41332fc..8b72250532ec 100644
--- a/security/boringssl/files/patch-CMakeLists.txt
+++ b/security/boringssl/files/patch-CMakeLists.txt
@@ -1,12 +1,12 @@
---- CMakeLists.txt.orig	2026-04-14 06:05:39 UTC
+--- CMakeLists.txt.orig	2026-05-08 11:25:09 UTC
 +++ CMakeLists.txt
-@@ -773,6 +773,9 @@ endif()
+@@ -775,6 +775,9 @@ endif()
    target_link_libraries(generate_mldsa_certs crypto)
  endif()
  
 +SET_TARGET_PROPERTIES(ssl PROPERTIES SOVERSION 1)
 +SET_TARGET_PROPERTIES(crypto PROPERTIES SOVERSION 1)
 +
  if(FUZZ)
    # TODO(crbug.com/42290412): Drive this build with build.json and flatten.
    add_subdirectory(fuzz)