diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..05a968d4
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,20 @@
+version: 2
+updates:
+  # ── Node (pnpm workspace; uses pnpm-lock.yaml) ─────────────────────────
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+    open-pull-requests-limit: 10
+
+  # ── GitHub Actions ────────────────────────────────────────────────────
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
+
+  # ── Docker (docker-compose.yml + Dockerfiles in repo root) ────────────
+  - package-ecosystem: 'docker'
+    directory: '/'
+    schedule:
+      interval: 'weekly'
diff --git a/docs/workstreams/ALL_OTHER_WORKSTREAMS_REMAINING.md b/docs/workstreams/ALL_OTHER_WORKSTREAMS_REMAINING.md
index 4f1044db..a44823fe 100644
--- a/docs/workstreams/ALL_OTHER_WORKSTREAMS_REMAINING.md
+++ b/docs/workstreams/ALL_OTHER_WORKSTREAMS_REMAINING.md
@@ -10,6 +10,7 @@
 ## Progress Log
 
 - 2026-02-14: Checklist created (`docs/workstreams/*`) in commit `5113b56`
+- 2026-02-14: Added Dependabot config (`.github/dependabot.yml`)
 
 ## Prereqs (Local)
 
@@ -74,7 +75,7 @@ Publishing + repo hygiene
 - [ ] **7.7** Evaluate Python shared package for `cosmos_client.py` + `blob_client.py` if MindLyst adds Python backend
 - [ ] **7.8** Integrate `@bytelyst/design-tokens` into LysnrAI dashboards (unified design language)
 - [ ] **7.9** Add pre-commit hooks to auto-run token generation when JSON changes
-- [ ] **7.10** Set up Renovate/Dependabot for common-plat dependency updates
+- [x] **7.10** Set up Renovate/Dependabot for common-plat dependency updates
 
 ## Extraction Service — Deferred Items