diff --git a/security/rekor/Makefile b/security/rekor/Makefile
index 9110da24c190..195a8a4ea7a7 100644
--- a/security/rekor/Makefile
+++ b/security/rekor/Makefile
@@ -1,65 +1,65 @@
 PORTNAME=	rekor
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.4.0
+DISTVERSION=	1.4.1
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Software Supply Chain Transparency Log ${${FLAVOR}_COMMENT}
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 FLAVORS=	client server
 FLAVOR?=	${FLAVORS:[1]}
 client_PKGNAMESUFFIX=	-client
 client_COMMENT=		(client only)
 client_PLIST=	${.CURDIR}/pkg-plist.client
 server_PKGNAMESUFFIX=	-server
 server_COMMENT=		(server only)
 server_PLIST=	${.CURDIR}/pkg-plist.server
 
 USES=		cpe go:modules
 CPE_VENDOR=	linuxfoundation
 .if ${FLAVOR} == server
 USE_RC_SUBR=	rekor
 .endif
 
 GO_MODULE=	github.com/sigstore/rekor
 .if ${FLAVOR} == client
 GO_TARGET=	./cmd/rekor-cli
 .elif ${FLAVOR} == server
 GO_TARGET=	./cmd/rekor-server \
 		./cmd/backfill-index \
 		./cmd/cleanup-index \
 		./cmd/copy-index
 .endif
 GO_BUILDFLAGS=	-ldflags="\
 	-X sigs.k8s.io/release-utils/version.gitVersion=$(DISTVERSION) \
 	-X sigs.k8s.io/release-utils/version.gitCommit=$(GIT_HASH) \
 	-X sigs.k8s.io/release-utils/version.gitTreeState=clean \
 	-X sigs.k8s.io/release-utils/version.buildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}}"
 
 .if ${FLAVOR} == server
 USERS=		${PORTNAME}
 GROUPS=		${PORTNAME}
 .endif
 
-GIT_HASH=	d7d31f0250d4b98ce0be3837fef9510b59e57cb7
+GIT_HASH=	7c83add6b10b15d4665b1773ccb6144da95394b7
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/rekor
 .if ${FLAVOR} == client
 	${INSTALL_DATA} ${WRKSRC}/config/rekor.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor.yaml.sample
 .elif ${FLAVOR} == server
 	${INSTALL_DATA} ${WRKSRC}/rekor-server.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor-server.yaml.sample
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/rekor/distinfo b/security/rekor/distinfo
index b320a1e22c81..3b43b80f60c6 100644
--- a/security/rekor/distinfo
+++ b/security/rekor/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1764952267
-SHA256 (go/security_rekor/rekor-v1.4.0/v1.4.0.mod) = d138bf1cf84acd9e4f7d2c250d2e109859cb6c2e831eb014459757f7898cbf97
-SIZE (go/security_rekor/rekor-v1.4.0/v1.4.0.mod) = 11266
-SHA256 (go/security_rekor/rekor-v1.4.0/v1.4.0.zip) = b153dea29ff49d7a3c034a8bdc07874e282068a18babd53834806484157b98c7
-SIZE (go/security_rekor/rekor-v1.4.0/v1.4.0.zip) = 1185127
+TIMESTAMP = 1765021625
+SHA256 (go/security_rekor/rekor-v1.4.1/v1.4.1.mod) = f09b8f719791b75aa36e056c11137b7c59dc06d2c0c13128e9693e9abd7b35b9
+SIZE (go/security_rekor/rekor-v1.4.1/v1.4.1.mod) = 11314
+SHA256 (go/security_rekor/rekor-v1.4.1/v1.4.1.zip) = fd313e3c24bba8b05524a116f902ad2a489bf12dfd2d7b32c45770ecc13d31c7
+SIZE (go/security_rekor/rekor-v1.4.1/v1.4.1.zip) = 1190306