diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..bda48f1
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,43 @@
+version: 2
+registries:
+  npm-npmjs:
+    type: npm-registry
+    url: https://registry.npmjs.org
+    replaces-base: true
+    token: ${{ secrets.NPM_TOKEN }}
+  github-flaconi-ci:
+    type: git
+    url: https://github.com
+    username: x-access-token
+    password: ${{secrets.REPO_READ_TOKEN}}
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: daily
+      time: "08:00"
+      timezone: Europe/Berlin
+    open-pull-requests-limit: 10
+    registries:
+      - npm-npmjs
+    ignore:
+      - dependency-name: "node-fetch"
+        versions: ["3.x"]
+    groups:
+      production:
+        dependency-type: production
+        update-types: [minor, patch]
+      production-major:
+        dependency-type: production
+        update-types: [major]
+      development:
+        dependency-type: development
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+      day: monday
+      time: "08:00"
+      timezone: Europe/Berlin
+    registries:
+      - github-flaconi-ci