diff --git a/.dependabot/config.yml b/.dependabot/config.yml
new file mode 100644
index 00000000..ee2a4797
--- /dev/null
+++ b/.dependabot/config.yml
@@ -0,0 +1,11 @@
+# Create Pull-Requests for NPM updates automatically
+# https://dependabot.com/docs/config-file/
+
+version: 1
+update_configs:
+  # Keep package.json (& lockfiles) up to date.
+  # Security updates will be created immediately,
+  # other updates monthly, to cut down on repo noise.
+  - package_manager: "ruby:bundler"
+    directory: "/"
+    update_schedule: "monthly"