diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..1fe607ae
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,35 @@
+# yaml-language-server: $schema:https://json.schemastore.org/dependabot-2.0.json
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    # Group minor and patch updates for both dependencies and devDependencies
+    # into a single PR so there's less PR's we have to mind.
+    groups:
+      non-major-node-dev-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+      non-major-node-dependencies:
+        dependency-type: production
+        update-types:
+          - minor
+          - patch
+    commit-message:
+      prefix: "build"
+      prefix-development: "build"
+      include: scope
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      all-github-actions:
+        update-types: ["major", "minor", "patch"]
+    commit-message:
+      prefix: "ci"
+      include: scope