diff --git a/security/rekor/Makefile b/security/rekor/Makefile
index 5fd7519facc6..9110da24c190 100644
--- a/security/rekor/Makefile
+++ b/security/rekor/Makefile
@@ -1,66 +1,65 @@
 PORTNAME=	rekor
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.3.10
-PORTREVISION=	9
+DISTVERSION=	1.4.0
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Software Supply Chain Transparency Log ${${FLAVOR}_COMMENT}
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 FLAVORS=	client server
 FLAVOR?=	${FLAVORS:[1]}
 client_PKGNAMESUFFIX=	-client
 client_COMMENT=		(client only)
 client_PLIST=	${.CURDIR}/pkg-plist.client
 server_PKGNAMESUFFIX=	-server
 server_COMMENT=		(server only)
 server_PLIST=	${.CURDIR}/pkg-plist.server
 
-USES=		cpe go:1.24,modules
+USES=		cpe go:modules
 CPE_VENDOR=	linuxfoundation
 .if ${FLAVOR} == server
 USE_RC_SUBR=	rekor
 .endif
 
 GO_MODULE=	github.com/sigstore/rekor
 .if ${FLAVOR} == client
 GO_TARGET=	./cmd/rekor-cli
 .elif ${FLAVOR} == server
 GO_TARGET=	./cmd/rekor-server \
 		./cmd/backfill-index \
 		./cmd/cleanup-index \
 		./cmd/copy-index
 .endif
 GO_BUILDFLAGS=	-ldflags="\
 	-X sigs.k8s.io/release-utils/version.gitVersion=$(DISTVERSION) \
 	-X sigs.k8s.io/release-utils/version.gitCommit=$(GIT_HASH) \
 	-X sigs.k8s.io/release-utils/version.gitTreeState=clean \
 	-X sigs.k8s.io/release-utils/version.buildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}}"
 
 .if ${FLAVOR} == server
 USERS=		${PORTNAME}
 GROUPS=		${PORTNAME}
 .endif
 
-GIT_HASH=	4118a64b4b9c228a968b2d935a00807ca1b33aed
+GIT_HASH=	d7d31f0250d4b98ce0be3837fef9510b59e57cb7
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/rekor
 .if ${FLAVOR} == client
 	${INSTALL_DATA} ${WRKSRC}/config/rekor.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor.yaml.sample
 .elif ${FLAVOR} == server
 	${INSTALL_DATA} ${WRKSRC}/rekor-server.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor-server.yaml.sample
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/rekor/distinfo b/security/rekor/distinfo
index 2c16c79e10d2..b320a1e22c81 100644
--- a/security/rekor/distinfo
+++ b/security/rekor/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1746289423
-SHA256 (go/security_rekor/rekor-v1.3.10/v1.3.10.mod) = 788c563e936db5816de40e7ff4a7f58ffa8d184fbe99842eec058da0d3b8f65d
-SIZE (go/security_rekor/rekor-v1.3.10/v1.3.10.mod) = 11137
-SHA256 (go/security_rekor/rekor-v1.3.10/v1.3.10.zip) = 6a65d2c266a8ac2351061716142c9cb373abec19c892d4b5c0c83e21bf2b3789
-SIZE (go/security_rekor/rekor-v1.3.10/v1.3.10.zip) = 1193215
+TIMESTAMP = 1764952267
+SHA256 (go/security_rekor/rekor-v1.4.0/v1.4.0.mod) = d138bf1cf84acd9e4f7d2c250d2e109859cb6c2e831eb014459757f7898cbf97
+SIZE (go/security_rekor/rekor-v1.4.0/v1.4.0.mod) = 11266
+SHA256 (go/security_rekor/rekor-v1.4.0/v1.4.0.zip) = b153dea29ff49d7a3c034a8bdc07874e282068a18babd53834806484157b98c7
+SIZE (go/security_rekor/rekor-v1.4.0/v1.4.0.zip) = 1185127