diff --git a/.dependabot/config.yml b/.dependabot/config.yml
new file mode 100644
index 0000000..d930a62
--- /dev/null
+++ b/.dependabot/config.yml
@@ -0,0 +1,11 @@
+version: 1
+
+update_configs:
+  - package_manager: "javascript"
+    directory: "/"
+    update_schedule: "weekly"
+    allowed_updates:
+      - match:
+          dependency_type: "direct"
+      - match:
+          update_type: "security"