diff --git a/security/govulncheck/Makefile b/security/govulncheck/Makefile
index e8846674cfbb..22a6265f4148 100644
--- a/security/govulncheck/Makefile
+++ b/security/govulncheck/Makefile
@@ -1,38 +1,36 @@
 PORTNAME=	govulncheck
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.1.4
-PORTREVISION=	13
+DISTVERSION=	1.2.0
 CATEGORIES=	security
 
 MAINTAINER=	einar@isnic.is
 COMMENT=	Database client and tools for the Go vulnerability database
 WWW=		https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		go:modules,run
 
 GO_MODULE=	golang.org/x/vuln
 GO_TARGET=	./cmd/govulncheck
 
 PLIST_FILES=	bin/govulncheck
 
 post-patch:
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/internal/scan/util.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/all_test.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/internal/scan/run.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/internal/test/packages.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/internal/test/testenv.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/internal/testenv/testenv.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/internal/vulncheck/packages.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/telemetry/internal/configstore/download.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/telemetry/internal/telemetry/dir.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/tools/go/gcexportdata/gcexportdata.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/tools/go/packages/packagestest/export.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/tools/internal/gcimporter/exportdata.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/tools/internal/gocommand/invoke.go
-	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/tools/internal/goroot/importcfg.go
 	@${REINPLACE_CMD} -e 's|%%GO_CMD%%|${GO_CMD}|g' ${WRKSRC}/vendor/golang.org/x/tools/internal/testenv/testenv.go
 
 .include <bsd.port.mk>
diff --git a/security/govulncheck/distinfo b/security/govulncheck/distinfo
index ab0dd596680a..e40915e730f3 100644
--- a/security/govulncheck/distinfo
+++ b/security/govulncheck/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1742556049
-SHA256 (go/security_govulncheck/govulncheck-v1.1.4/v1.1.4.mod) = 40e5fa329adbfd7dad2476465ba340d2531b4d33640b82c81c34ac90f36cbd2a
-SIZE (go/security_govulncheck/govulncheck-v1.1.4/v1.1.4.mod) = 387
-SHA256 (go/security_govulncheck/govulncheck-v1.1.4/v1.1.4.zip) = 115ff76fba8f73b27106eb2e59e3f30696f4f7faaeed55471b5b65c3994b503d
-SIZE (go/security_govulncheck/govulncheck-v1.1.4/v1.1.4.zip) = 853384
+TIMESTAMP = 1776164057
+SHA256 (go/security_govulncheck/govulncheck-v1.2.0/v1.2.0.mod) = bece0849bea67bbfc63f62b9adc2a6aa45675e8b8642c34dfffa4ec24150e9db
+SIZE (go/security_govulncheck/govulncheck-v1.2.0/v1.2.0.mod) = 510
+SHA256 (go/security_govulncheck/govulncheck-v1.2.0/v1.2.0.zip) = 06e3f7795be43af83b5c18eab6379e81bf06b87bb96d88b63c41cbe9e72334bb
+SIZE (go/security_govulncheck/govulncheck-v1.2.0/v1.2.0.zip) = 853781
diff --git a/security/govulncheck/files/patch-vendor_golang.org_x_telemetry_internal_configstore_download.go b/security/govulncheck/files/patch-vendor_golang.org_x_telemetry_internal_configstore_download.go
index 19f5c34ba0cc..4fd852f91a5d 100644
--- a/security/govulncheck/files/patch-vendor_golang.org_x_telemetry_internal_configstore_download.go
+++ b/security/govulncheck/files/patch-vendor_golang.org_x_telemetry_internal_configstore_download.go
@@ -1,11 +1,11 @@
---- vendor/golang.org/x/telemetry/internal/configstore/download.go.orig	2025-05-08 09:35:28 UTC
+--- vendor/golang.org/x/telemetry/internal/configstore/download.go.orig	2026-04-14 11:02:21 UTC
 +++ vendor/golang.org/x/telemetry/internal/configstore/download.go
-@@ -36,7 +36,7 @@ func Download(version string, envOverlay []string) (*t
+@@ -51,7 +51,7 @@ func Download(version string, envOverlay []string) (*t
  	}
  	modVer := ModulePath + "@" + version
  	var stdout, stderr bytes.Buffer
 -	cmd := exec.Command("go", "mod", "download", "-json", modVer)
 +	cmd := exec.Command("%%GO_CMD%%", "mod", "download", "-json", modVer)
+ 	needNoConsole(cmd)
  	cmd.Env = append(os.Environ(), envOverlay...)
  	cmd.Stdout = &stdout
- 	cmd.Stderr = &stderr
diff --git a/security/govulncheck/files/patch-vendor_golang.org_x_tools_internal_goroot_importcfg.go b/security/govulncheck/files/patch-vendor_golang.org_x_tools_internal_goroot_importcfg.go
deleted file mode 100644
index 92a3260e8b51..000000000000
--- a/security/govulncheck/files/patch-vendor_golang.org_x_tools_internal_goroot_importcfg.go
+++ /dev/null
@@ -1,11 +0,0 @@
---- vendor/golang.org/x/tools/internal/goroot/importcfg.go.orig	2025-05-08 09:33:18 UTC
-+++ vendor/golang.org/x/tools/internal/goroot/importcfg.go
-@@ -47,7 +47,7 @@ func PkgfileMap() (map[string]string, error) {
- func PkgfileMap() (map[string]string, error) {
- 	once.Do(func() {
- 		m := make(map[string]string)
--		output, err := exec.Command("go", "list", "-export", "-e", "-f", "{{.ImportPath}} {{.Export}}", "std", "cmd").Output()
-+		output, err := exec.Command("%%GO_CMD%%", "list", "-export", "-e", "-f", "{{.ImportPath}} {{.Export}}", "std", "cmd").Output()
- 		if err != nil {
- 			stdlibPkgfileErr = err
- 		}