diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..619e9bd4
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+# Referenced from:
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
+
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
diff --git a/Changes b/Changes
index f03a4be0..c6e4aa27 100644
--- a/Changes
+++ b/Changes
@@ -1,5 +1,6 @@
 LIST OF CHANGES FOR NPG-QC PACKAGE
 
+ - Added .github/dependabot.yml file to auto-update GitHub actions
  - GitHub CI - updated deprecated v2 runner action to v3
  - docs
   - automated creation/update of confluence pages for docs