diff --git a/www/authelia/Makefile b/www/authelia/Makefile
index 506450997224..a21b9e4ba88d 100644
--- a/www/authelia/Makefile
+++ b/www/authelia/Makefile
@@ -1,35 +1,34 @@
 PORTNAME=	authelia
 DISTVERSIONPREFIX=	v
-DISTVERSION=	4.38.18
-PORTREVISION=	3
+DISTVERSION=	4.39.1
 CATEGORIES=	www
 MASTER_SITES=	https://github.com/authelia/authelia/releases/download/v${DISTVERSION}/:public_html
 DISTFILES=	authelia-${DISTVERSIONFULL}-public_html${EXTRACT_SUFX}:public_html # html root directory needs to be built in a special way
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	Single sign-on multi-factor portal for web apps
 WWW=		https://www.authelia.com/docs/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-USES=		cpe go:1.23,modules
+USES=		cpe go:1.24,modules
 
 GO_MODULE=	github.com/authelia/authelia/v4
 GO_TARGET=	./cmd/${PORTNAME}
 
 USER=		root # 'nobody' doesn't work well because authelia attempts to remove files, etc.
 SUB_LIST=	USER=${USER}
 SUB_FILES=	pkg-message
 USE_RC_SUBR=	${PORTNAME}
 
 post-patch: # extract -public-html
 	@${RM} -r ${WRKSRC}/internal/server/public_html
 	@${MV} ${WRKDIR}/public_html ${WRKSRC}/internal/server
 	@${CP} -r ${WRKSRC}/api ${WRKSRC}/internal/server/public_html/api
 
 post-install: # install the config file
 	${INSTALL_DATA} ${WRKSRC}/config.template.yml ${STAGEDIR}${PREFIX}/etc/authelia.yml.sample
 	${INSTALL_DATA} ${FILESDIR}/simplified-authelia.yml ${STAGEDIR}${PREFIX}/etc
 
 .include <bsd.port.mk>
diff --git a/www/authelia/distinfo b/www/authelia/distinfo
index 7de3e1482f03..25d1f69c858a 100644
--- a/www/authelia/distinfo
+++ b/www/authelia/distinfo
@@ -1,7 +1,7 @@
-TIMESTAMP = 1735810648
-SHA256 (go/www_authelia/authelia-v4.38.18/authelia-v4.38.18-public_html.tar.gz) = 746fd018f39c1e5f3671757328cf1ed356dc6cd055170a0c914471d18ee34c46
-SIZE (go/www_authelia/authelia-v4.38.18/authelia-v4.38.18-public_html.tar.gz) = 1326041
-SHA256 (go/www_authelia/authelia-v4.38.18/v4.38.18.mod) = bb16d355455f16055e533f09183c0d5f04311a85e826a224b3ad5fdf594ddc63
-SIZE (go/www_authelia/authelia-v4.38.18/v4.38.18.mod) = 4811
-SHA256 (go/www_authelia/authelia-v4.38.18/v4.38.18.zip) = 95ddb8e4548a5da517b6a88761aa9f51eec2701a78e2c180b402751e9fa931c4
-SIZE (go/www_authelia/authelia-v4.38.18/v4.38.18.zip) = 7668211
+TIMESTAMP = 1742286137
+SHA256 (go/www_authelia/authelia-v4.39.1/authelia-v4.39.1-public_html.tar.gz) = 2effecd17db27ea5d7ce2d153bc55ad0fa58980af21dfa00107ded9127c2cd1b
+SIZE (go/www_authelia/authelia-v4.39.1/authelia-v4.39.1-public_html.tar.gz) = 1358073
+SHA256 (go/www_authelia/authelia-v4.39.1/v4.39.1.mod) = f0272caa797706876cf93a343df7c647ad096538f36409dd8de0016341e85cc3
+SIZE (go/www_authelia/authelia-v4.39.1/v4.39.1.mod) = 5298
+SHA256 (go/www_authelia/authelia-v4.39.1/v4.39.1.zip) = 5dbc328fd3bf2af997a0080a4fa9b5dec00eca3398b574166a6ef65fe4567703
+SIZE (go/www_authelia/authelia-v4.39.1/v4.39.1.zip) = 8107052
diff --git a/www/authelia/files/pkg-message.in b/www/authelia/files/pkg-message.in
index 0e1e75c4c623..740c2fa54d13 100644
--- a/www/authelia/files/pkg-message.in
+++ b/www/authelia/files/pkg-message.in
@@ -1,15 +1,24 @@
 [
 { type: install
   message: <<EOM
 You installed Authelia: Single sign-on multi-factor portal for web apps.
 
 In order to use it please start the service 'authelia' and
 then access the URL http://0.0.0.0:9091/ in your favorite browser.
 
 You can try a simplified config file %%PREFIX%%/etc/simplified-authelia.yml
 instead of %%PREFIX%%/etc/authelia.yml if simplified setup suits you
 better.
 
+EOM
+}
+{ type: upgrade
+  maximum_version: "4.39.0"
+  message: <<EOM
+The default claims for ID Tokens minted by the Authelia OpenID Connect 1.0
+Identity Provider have changed, check
+https://www.authelia.com/blog/4.39-release-notes/ for more detail.
+
 EOM
 }
 ]