diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..7caa8fd
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml
new file mode 100644
index 0000000..c7fcf2a
--- /dev/null
+++ b/.github/workflows/automerge.yml
@@ -0,0 +1,18 @@
+name: Enable automerge on dependabot PRs
+
+on:
+  pull_request_target:
+
+jobs:
+  automerge:
+    name: Enable automerge on dependabot PRs
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - run: gh pr merge ${{ github.event.pull_request.html_url }} --auto --squash
+      - run: gh pr review ${{ github.event.pull_request.html_url }} --approve
+    env:
+      GH_TOKEN: ${{ github.token }}