diff --git a/security/go-tuf/Makefile b/security/go-tuf/Makefile
index 33357d7c3d6b..0079639db75e 100644
--- a/security/go-tuf/Makefile
+++ b/security/go-tuf/Makefile
@@ -1,21 +1,21 @@
 PORTNAME=	go-tuf
 DISTVERSIONPREFIX=	v
-DISTVERSION=	2.3.1
+DISTVERSION=	2.4.0
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Framework for Securing Software
 WWW=		https://theupdateframework.io
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-USES=		cpe go:1.24+,modules
+USES=		cpe go:1.25+,modules
 CPE_VENDOR=	theupdateframework
 
 GO_TARGET=	./examples/cli/tuf-client
 GO_MODULE=	github.com/theupdateframework/go-tuf/v2
 
 PLIST_FILES=	bin/tuf-client
 
 .include <bsd.port.mk>
diff --git a/security/go-tuf/distinfo b/security/go-tuf/distinfo
index 711371ff971c..07f4288b55ed 100644
--- a/security/go-tuf/distinfo
+++ b/security/go-tuf/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1769276122
-SHA256 (go/security_go-tuf/go-tuf-v2.3.1/v2.3.1.mod) = db933a60baa23e5ae5a09d844a2efe0c4fed45b0028cbf881cfa1fffecadb0b7
-SIZE (go/security_go-tuf/go-tuf-v2.3.1/v2.3.1.mod) = 1027
-SHA256 (go/security_go-tuf/go-tuf-v2.3.1/v2.3.1.zip) = a34a20962147ddbea55fac0b4128eea04dba7733f34b205b871d51612efbab90
-SIZE (go/security_go-tuf/go-tuf-v2.3.1/v2.3.1.zip) = 164061
+TIMESTAMP = 1769368302
+SHA256 (go/security_go-tuf/go-tuf-v2.4.0/v2.4.0.mod) = db933a60baa23e5ae5a09d844a2efe0c4fed45b0028cbf881cfa1fffecadb0b7
+SIZE (go/security_go-tuf/go-tuf-v2.4.0/v2.4.0.mod) = 1027
+SHA256 (go/security_go-tuf/go-tuf-v2.4.0/v2.4.0.zip) = 48700e64647ddc1c63595667b91b53f0b941bf06437bedf9994b4c9d3a87a388
+SIZE (go/security_go-tuf/go-tuf-v2.4.0/v2.4.0.zip) = 165364