diff --git a/.dependabot/config.yml b/.dependabot/config.yml
new file mode 100644
index 0000000000..470b8fd6ca
--- /dev/null
+++ b/.dependabot/config.yml
@@ -0,0 +1,31 @@
+version: 1
+update_configs:
+  # Keep package.json (& lockfiles) up to date as soon as
+  # new versions are published to the npm registry
+  - package_manager: "javascript"
+    directory: "/"
+    update_schedule: "live"
+
+    # Automerge all whitelisted dependency updates (after CI passes)
+    automerged_updates:
+      - match:
+          dependency_name: "*mocha*"
+          update_type: "all"
+      - match:
+          dependency_name: "chai*"
+          update_type: "all"
+      - match:
+          dependency_name: "enzyme*"
+          update_type: "all"
+      - match:
+          dependency_name: "eslint*"
+          update_type: "all"
+      - match:
+          dependency_name: "sinon"
+          update_type: "all"
+      - match:
+          dependency_name: "semver"
+          update_type: "all"
+      - match:
+          dependency_name: "test-until"
+          update_type: "all"