diff --git a/security/lego/Makefile b/security/lego/Makefile
index 6ba0cbb685bf..0ce1640d0714 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,44 +1,44 @@
 PORTNAME=	lego
 DISTVERSIONPREFIX=	v
-DISTVERSION=	4.27.0
+DISTVERSION=	4.28.0
 CATEGORIES=	security
 
 MAINTAINER=	matt@matthoran.com
 COMMENT=	Let's Encrypt client and ACME library written in Go
 WWW=		https://github.com/go-acme/lego
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
 USES=		go:modules
 GO_MODULE=	github.com/go-acme/lego/v4
 GO_TARGET=	./cmd/lego
 GO_BUILDFLAGS=	-ldflags '-X "main.version=${DISTVERSION}"'
 
 SAMPLE_FILES=	deploy.sh.sample lego.sh.sample
 SUB_FILES=	${SAMPLE_FILES} 604.lego pkg-message
 SUB_LIST=	LEGO_USER=${LEGO_USER} \
 		PORTNAME=${PORTNAME}
 
 LEGO_USER?=	_lego
 .if ${LEGO_USER} == _lego
 USERS=		${LEGO_USER}
 GROUPS=		${LEGO_USER}
 .endif
 GROUPS+=	www
 PLIST_SUB=	LEGO_USER=${LEGO_USER}
 
 PERIODIC_DIRS=	etc/periodic/weekly
 PERIODIC_FILES=	604.lego
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS} \
 		 ${STAGEDIR}${PREFIX}/etc/ssl/lego \
 		 ${STAGEDIR}${ETCDIR} \
 		 ${STAGEDIR}${WWWDIR}
 	${INSTALL_SCRIPT} ${WRKDIR}/${PERIODIC_FILES} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}
 	${INSTALL_SCRIPT} ${SAMPLE_FILES:C|^|${WRKDIR}/|} ${STAGEDIR}${ETCDIR}
 
 .include <bsd.port.mk>
diff --git a/security/lego/distinfo b/security/lego/distinfo
index 61e1e053a607..cdd859e41e54 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1760846644
-SHA256 (go/security_lego/lego-v4.27.0/v4.27.0.mod) = cecadfa0296e7454a6091949ae4a9b97494ab54d298e070da9b61b4d95c8a1f2
-SIZE (go/security_lego/lego-v4.27.0/v4.27.0.mod) = 11015
-SHA256 (go/security_lego/lego-v4.27.0/v4.27.0.zip) = c397e8c08ab816854ac9facf79479edd0624e175b1ef65275795004e17d8f515
-SIZE (go/security_lego/lego-v4.27.0/v4.27.0.zip) = 1654875
+TIMESTAMP = 1762008812
+SHA256 (go/security_lego/lego-v4.28.0/v4.28.0.mod) = 08b0178bf0929722a39e7bc70a79701ffd726fd3708efccc64ebb36a201ffb33
+SIZE (go/security_lego/lego-v4.28.0/v4.28.0.mod) = 10956
+SHA256 (go/security_lego/lego-v4.28.0/v4.28.0.zip) = adfd3efdff65f0b50985f885909df71a07ec99cc57df8ff9aff91c2f619083e1
+SIZE (go/security_lego/lego-v4.28.0/v4.28.0.zip) = 1681612