diff --git a/.github/workflows/bump_freetype.yml b/.github/workflows/bump_freetype.yml
new file mode 100644
index 0000000..c34fcb6
--- /dev/null
+++ b/.github/workflows/bump_freetype.yml
@@ -0,0 +1,91 @@
+name: bump_freetype
+
+on:
+  schedule:
+  - cron: '4 5 * * *'
+  workflow_dispatch:
+
+jobs:
+  bump_freetype:
+    runs-on: ubuntu-22.04
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - run: >
+        git config user.name mediamtx-bot
+        && git config user.email bot@mediamtx
+        && ((git checkout deps/freetype && git rebase ${GITHUB_REF_NAME}) || git checkout -b deps/freetype)
+
+    - uses: actions/github-script@v6
+      with:
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+        script: |
+          const fs = require('fs').promises;
+
+          // get last tag
+          let curTag = null;
+          for (let i = 1; i < 20; i++) {
+            const tags = await github.rest.repos.listTags({
+              owner: 'freetype',
+              repo: 'freetype',
+              page: i,
+            });
+            for (const tag of tags.data) {
+              if (tag.name.startsWith('VER-2-') && !tag.name.includes('BETA')) {
+                curTag = tag;
+                break;
+              }
+            }
+            if (curTag !== null) {
+              break;
+            }
+          }
+
+          // write version to disk
+          let existing = await fs.readFile('subprojects/freetype.wrap', 'utf-8');
+          existing = existing.replace(/revision = .*?/, `revision = ${curTag.name}`);
+          await fs.writeFile('subprojects/freetype.wrap', existing, 'utf-8');
+
+          // make version available to next steps
+          core.exportVariable('VERSION', curTag.name);
+
+    - id: check_repo
+      run: >
+        test -n "$(git status --porcelain)" && echo "update=1" >> "$GITHUB_OUTPUT" || echo "update=0" >> "$GITHUB_OUTPUT"
+
+    - if: ${{ steps.check_repo.outputs.update == '1' }}
+      run: >
+        git reset ${GITHUB_REF_NAME}
+        && git add .
+        && git commit -m "bump freetype to ${VERSION}"
+        && git push --set-upstream origin deps/freetype --force
+
+    - if: ${{ steps.check_repo.outputs.update == '1' }}
+      uses: actions/github-script@v6
+      with:
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+        script: |
+          const prs = await github.rest.pulls.list({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            head: `${context.repo.owner}:deps/freetype`,
+            state: 'open',
+          });
+
+          if (prs.data.length == 0) {
+            await github.rest.pulls.create({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              head: 'deps/freetype',
+              base: context.ref.slice('refs/heads/'.length),
+              title: `bump freetype to ${process.env.VERSION}`,
+            });
+          } else {
+            github.rest.pulls.update({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              pull_number: prs.data[0].number,
+              title: `bump freetype to ${process.env.VERSION}`,
+            });
+          }