diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
new file mode 100644
index 0000000..7c82edf
--- /dev/null
+++ b/.github/dependabot.yaml
@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "pip"  # See documentation for possible values
+    directory: "/"            # Location of package manifests
+    schedule:
+      interval: "weekly"
diff --git a/requirements.txt b/requirements.txt
index 8f1459b..e8d81b1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -10,7 +10,7 @@ attrs==21.4.0
 bdkpython==0.0.5
 beancount==2.3.5
 beautifulsoup4==4.10.0
-bottle==0.12.19
+bottle==0.12.20
 buidl==0.2.36
 cachetools==5.0.0
 ccxt==1.74.49
@@ -36,7 +36,7 @@ isort==5.10.1
 itsdangerous==2.1.0
 Jinja2==3.0.3
 lazy-object-proxy==1.7.1
-lxml==4.8.0
+lxml==4.9.1
 MarkupSafe==2.1.0
 mccabe==0.6.1
 multidict==6.0.2
@@ -50,7 +50,7 @@ protobuf==3.20.0
 py==1.11.0
 pyasn1==0.4.8
 pyasn1-modules==0.2.8
-pycares==4.1.2
+pycares==4.2.0
 pycparser==2.21
 pydantic==1.9.0
 pyparsing==3.0.7