diff --git a/.github/workflows/ci_cpm.yml b/.github/workflows/ci_cpm.yml
new file mode 100644
index 0000000..bed471b
--- /dev/null
+++ b/.github/workflows/ci_cpm.yml
@@ -0,0 +1,32 @@
+# SPDX-FileCopyrightText: 2006-2024 Knut Reinert & Freie Universität Berlin
+# SPDX-FileCopyrightText: 2016-2024 Knut Reinert & MPI für molekulare Genetik
+# SPDX-License-Identifier: CC0-1.0
+
+name: Update CPM
+
+on:
+  schedule:
+    - cron: "0 12 * * SAT"
+  workflow_dispatch:
+
+env:
+  TZ: Europe/Berlin
+
+concurrency:
+  group: update-cpm-actions
+  cancel-in-progress: true
+
+jobs:
+  update_cpm:
+    name: Update CPM
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    if: github.repository_owner == 'seqan' || github.event_name == 'workflow_dispatch'
+    steps:
+      - name: Run update CPM
+        uses: seqan/actions/update_cpm_package_lock@main
+        with:
+          token: ${{ secrets.SEQAN_ACTIONS_PAT }}
+          gpg_key: ${{ secrets.SEQAN_ACTIONS_GPG_KEY }}
+          gpg_passphrase: ${{ secrets.SEQAN_ACTIONS_GPG_PASSPHRASE }}
+          package_lock_file: cmake/package-lock.cmake
diff --git a/cmake/package-lock.cmake b/cmake/package-lock.cmake
index 104851a..38eb680 100644
--- a/cmake/package-lock.cmake
+++ b/cmake/package-lock.cmake
@@ -6,10 +6,10 @@
 # This file should be committed to version control
 
 # seqan3
-set (NEEDLE_SEQAN3_VERSION f500cf7fbe128636c6e50a99519b5eb2532ab70e)
+set (NEEDLE_SEQAN3_VERSION 4d03890530089b040221876c9e368fc250c4583f)
 CPMDeclarePackage (seqan3
                    NAME seqan3
-                   GIT_TAG ${NEEDLE_SEQAN3_VERSION}
+                   GIT_TAG ${NEEDLE_SEQAN3_VERSION} # main
                    GITHUB_REPOSITORY seqan/seqan3
                    SYSTEM TRUE
                    EXCLUDE_FROM_ALL TRUE
@@ -31,7 +31,7 @@ CPMDeclarePackage (googletest
 set (NEEDLE_ROBIN_HOOD_VERSION 7697343363af4cc3f42cab17be49e6af9ab181e2)
 CPMDeclarePackage (robin-hood
                    NAME robin-hood
-                   GIT_TAG ${NEEDLE_ROBIN_HOOD_VERSION}
+                   GIT_TAG ${NEEDLE_ROBIN_HOOD_VERSION} # master
                    GITHUB_REPOSITORY martinus/robin-hood-hashing
                    SYSTEM TRUE
                    EXCLUDE_FROM_ALL TRUE
@@ -42,7 +42,7 @@ CPMDeclarePackage (robin-hood
 set (USE_CCACHE_VERSION d2a54ef555b6fc2d496a4c9506dbeb7cf899ce37)
 CPMDeclarePackage (use_ccache
                    NAME use_ccache
-                   GIT_TAG ${USE_CCACHE_VERSION}
+                   GIT_TAG ${USE_CCACHE_VERSION} # main
                    GITHUB_REPOSITORY seqan/cmake-scripts
                    SOURCE_SUBDIR ccache
                    SYSTEM TRUE