diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..9b4f1ec
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,35 @@
+version: 2
+
+updates:
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'monday'
+      time: '11:00'
+      timezone: 'America/Los_Angeles'
+    cooldown:
+      default-days: 7
+    groups:
+      security-vulnerabilities-npm:
+        applies-to: 'security-updates'
+        update-types:
+          - 'minor'
+          - 'patch'
+        patterns:
+          - '*'
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+      day: 'monday'
+      time: '11:00'
+      timezone: 'America/Los_Angeles'
+    cooldown:
+      default-days: 7
+    groups:
+      security-vulnerabilities-github-actions:
+        applies-to: 'security-updates'
+        patterns:
+          - '*'