diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..e1a1cf2
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7838e08..6046d4e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,8 @@ All notable changes to this project are documented in this file.
 
 ## Unreleased
 
+- Added `.github/dependabot.yml`: weekly version updates for `pip`
+  dependencies and GitHub Actions.
 - Added GitHub issue templates: `.github/ISSUE_TEMPLATE/bug_report.yml`,
   `feature_request.yml`, and a `config.yml` that points security reports at
   private vulnerability reporting instead of a public issue.