diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..c9b6cb6
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,16 @@
+version: 2
+registries:
+  rubygems-github:
+    type: rubygems-server
+    url: https://rubygems.pkg.github.com/clio
+    token: ${{ secrets.DEPENDABOT_GITHUB_TOKEN }}
+
+updates:
+  - package-ecosystem: "bundler"
+    directory: "/"
+    vendor: true
+    insecure-external-code-execution: allow
+    registries: "*"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 2