diff --git a/.github/workflows/gradle-wrapper-upgrade-execution.yml b/.github/workflows/gradle-wrapper-upgrade-execution.yml
new file mode 100644
index 0000000000..256c8a68f7
--- /dev/null
+++ b/.github/workflows/gradle-wrapper-upgrade-execution.yml
@@ -0,0 +1,25 @@
+name: Execute Gradle Wrapper Upgrade
+
+on:
+  schedule:
+    - cron:  '0 2 * * *' # 2am UTC
+  workflow_dispatch:
+
+jobs:
+  upgrade_wrapper:
+    name: Execution
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v3
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+      - name: Set up Gradle
+        uses: gradle/gradle-build-action@v2
+      - name: Upgrade Wrappers
+        run: ./gradlew clean upgradeGradleWrapperAll --continue -Porg.gradle.java.installations.auto-download=false
+        env:
+          WRAPPER_UPGRADE_GIT_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/build.gradle b/build.gradle
index 6911c789f6..713f9ba277 100644
--- a/build.gradle
+++ b/build.gradle
@@ -14,6 +14,10 @@ buildscript {
 	}
 }
 
+plugins {
+	alias(libs.plugins.org.gradle.wrapper.upgrade)
+}
+
 apply plugin: 'io.spring.nohttp'
 apply plugin: 'locks'
 apply plugin: 's101'
@@ -195,3 +199,20 @@ tasks.register('cloneSamples', IncludeRepoTask) {
 s101 {
 	configurationDirectory = project.file("etc/s101")
 }
+
+wrapperUpgrade {
+	gradle {
+		'spring-security-main' {
+			repo = 'spring-projects/spring-security'
+			baseBranch = 'main'
+		}
+		'spring-security-6.1.x' {
+			repo = 'spring-projects/spring-security'
+			baseBranch = '6.1.x'
+		}
+		'spring-security-6.0.x' {
+			repo = 'spring-projects/spring-security'
+			baseBranch = '6.0.x'
+		}
+	}
+}
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 146309a854..0483acf313 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -103,3 +103,5 @@ org-jfrog-buildinfo-build-info-extractor-gradle = "org.jfrog.buildinfo:build-inf
 org-sonarsource-scanner-gradle-sonarqube-gradle-plugin = "org.sonarsource.scanner.gradle:sonarqube-gradle-plugin:2.7.1"
 
 [plugins]
+
+org-gradle-wrapper-upgrade = "org.gradle.wrapper-upgrade:0.11.4"