diff --git a/devel/php-composer2/Makefile b/devel/php-composer2/Makefile
index f49ae2228dee..729872759a60 100644
--- a/devel/php-composer2/Makefile
+++ b/devel/php-composer2/Makefile
@@ -1,46 +1,46 @@
 PORTNAME=	composer
-DISTVERSION=	2.5.3
+DISTVERSION=	2.5.4
 CATEGORIES=	devel
 MASTER_SITES=	https://getcomposer.org/download/${DISTVERSION}/
 PKGNAMEPREFIX=	${PHP_PKGNAMEPREFIX}
 PKGNAMESUFFIX=	2
 DISTNAME=	composer
 EXTRACT_SUFX=	.phar
 DIST_SUBDIR=	${PORTNAME}-${PORTVERSION}
 
 MAINTAINER=	cyberbotx@cyberbotx.com
 COMMENT=	Dependency Manager for PHP, version 2.x
 WWW=		https://getcomposer.org/
 
 LICENSE=	MIT
 
 RUN_DEPENDS=	ca_root_nss>0:security/ca_root_nss
 
 USES=		cpe php:flavors
 CPE_VENDOR=	getcomposer
 USE_PHP=	ctype filter intl json mbstring openssl phar
 
 CONFLICTS_INSTALL=	php*-composer php*-composer2
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 NO_WRKSUBDIR=	yes
 
 PLIST_FILES=	bin/composer \
 		bin/composer.phar
 
 OPTIONS_DEFINE=		CURL
 OPTIONS_DEFAULT=	CURL
 
 CURL_DESC=	Install the cURL extension for faster downloads
 CURL_USE=	PHP=curl
 
 do-extract:
 	${MKDIR} ${WRKSRC}/
 	${CP} ${_DISTDIR}/composer.phar ${WRKSRC}/
 
 do-install:
 	${INSTALL_SCRIPT} ${WRKSRC}/composer.phar ${STAGEDIR}${PREFIX}/bin/
 	${LN} -s composer.phar ${STAGEDIR}${PREFIX}/bin/composer
 
 .include <bsd.port.mk>
diff --git a/devel/php-composer2/distinfo b/devel/php-composer2/distinfo
index f5927b1cbd59..d1436a7f7ed8 100644
--- a/devel/php-composer2/distinfo
+++ b/devel/php-composer2/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1676035968
-SHA256 (composer-2.5.3/composer.phar) = 2e1061821951c6a5ece033a025d06296d4a1d056fee2f4bebd35815cf4b1b0f9
-SIZE (composer-2.5.3/composer.phar) = 2831525
+TIMESTAMP = 1677231207
+SHA256 (composer-2.5.4/composer.phar) = 91ce6cbf9463eae86ae9d5c21d42faa601a519f3fbb2b623a55ee24678079bd3
+SIZE (composer-2.5.4/composer.phar) = 2831608