diff --git a/security/lego/Makefile b/security/lego/Makefile
index 2dac4d22ab74..4c5d14b1c312 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,43 +1,42 @@
 PORTNAME=	lego
 DISTVERSIONPREFIX=	v
-DISTVERSION=	4.19.1
-PORTREVISION=	1
+DISTVERSION=	4.20.2
 CATEGORIES=	security
 
 MAINTAINER=	matt@matthoran.com
 COMMENT=	Let's Encrypt client and ACME library written in Go
 WWW=		https://github.com/go-acme/lego
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
 USES=		go:1.23,modules
 GO_MODULE=	github.com/go-acme/lego/v4
 GO_TARGET=	./cmd/lego
 GO_BUILDFLAGS=	-ldflags '-X "main.version=${DISTVERSION}"'
 
 SAMPLE_FILES=	deploy.sh.sample lego.sh.sample
 SUB_FILES=	${SAMPLE_FILES} 604.lego pkg-message
 SUB_LIST=	LEGO_USER=${LEGO_USER} \
 		PORTNAME=${PORTNAME}
 
 LEGO_USER?=	_lego
 
 USERS=		${LEGO_USER}
 GROUPS=		${LEGO_USER}
 
 PERIODIC_DIRS=	etc/periodic/weekly
 PERIODIC_FILES=	604.lego
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}
 	${INSTALL_SCRIPT} ${WRKDIR}/${PERIODIC_FILES} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}/${PERIODIC_FILES}
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/ssl/lego \
 		${STAGEDIR}${ETCDIR} ${STAGEDIR}${WWWDIR}
 .	for d in ${SAMPLE_FILES}
 		${INSTALL_SCRIPT} ${WRKDIR}/${d} ${STAGEDIR}${ETCDIR}/${d}
 .	endfor
 
 .include <bsd.port.mk>
diff --git a/security/lego/distinfo b/security/lego/distinfo
index 404f5d1fd1b1..8efe2621b3fe 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1728246734
-SHA256 (go/security_lego/lego-v4.19.1/v4.19.1.mod) = 7b06f6fcaf896c66b1649d04ee32030c7ec5a6fa09c45973d909285f46a42a70
-SIZE (go/security_lego/lego-v4.19.1/v4.19.1.mod) = 10353
-SHA256 (go/security_lego/lego-v4.19.1/v4.19.1.zip) = 223a6c18027bcb7681fe059cd7bd77b54f8133744018368b0fa573885f78f178
-SIZE (go/security_lego/lego-v4.19.1/v4.19.1.zip) = 1305733
+TIMESTAMP = 1731457270
+SHA256 (go/security_lego/lego-v4.20.2/v4.20.2.mod) = c01add613b52b050fe6110e9ac3e427e69793ff4cd1af6fafe1cac512c844e97
+SIZE (go/security_lego/lego-v4.20.2/v4.20.2.mod) = 10483
+SHA256 (go/security_lego/lego-v4.20.2/v4.20.2.zip) = 4dd8eb46a62e6243dfecb1c5430fe5a3db9783eadf5f26d89d5d29a5ef6dc019
+SIZE (go/security_lego/lego-v4.20.2/v4.20.2.zip) = 1355584