From 02630241beabdceaf68f351724778c6e48b6d39f Mon Sep 17 00:00:00 2001
From: Hauke Schulz <43613877+observingClouds@users.noreply.github.com>
Date: Mon, 10 Aug 2026 10:48:57 +0200
Subject: [PATCH 1/4] Add dependabot config

---
 .github/dependabot.yml | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..49cb3cb7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,34 @@
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /.github/workflows
+  schedule:
+    interval: quarterly
+  cooldown:
+    default-days: 7
+  groups:
+    gha-patches:
+      update-types:
+      - patch
+
+- package-ecosystem: uv
+  directory: /
+  schedule:
+    interval: quarterly
+  cooldown:
+    default-days: 7
+  groups:
+    uv.lock-patches:
+      update-types:
+      - patch
+
+- package-ecosystem: "pre-commit"
+  directory: "/"
+  schedule:
+    interval: "quarterly"
+  cooldown:
+    default-days: 7
+  groups:
+    pre-commit-all:
+      patterns:
+        - "*"

From 927905126626eefe0b10a4d6ceb189d2334fda2f Mon Sep 17 00:00:00 2001
From: Hauke Schulz <43613877+observingClouds@users.noreply.github.com>
Date: Mon, 10 Aug 2026 11:17:55 +0200
Subject: [PATCH 2/4] Add action to automatically create changelog entries for
 dep updates

---
 .../workflows/dependabot-auto-changelog.yml   | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 .github/workflows/dependabot-auto-changelog.yml

diff --git a/.github/workflows/dependabot-auto-changelog.yml b/.github/workflows/dependabot-auto-changelog.yml
new file mode 100644
index 00000000..bd9da9d5
--- /dev/null
+++ b/.github/workflows/dependabot-auto-changelog.yml
@@ -0,0 +1,19 @@
+name: Dependabot Changelog Entry
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+    branches: [main]
+
+jobs:
+  update-changelog:
+    if: github.actor == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+    - uses: actions/checkout@v7
+    - uses: crambl/dependabot-changelog-writer@478f44ae023312b697349f9d12b646936020936f  #v1.3.1
+      with:
+        section-header: 'Maintenance'

From db856a2a81cf74b87914af75d51341329e2ccfbc Mon Sep 17 00:00:00 2001
From: Hauke Schulz <43613877+observingClouds@users.noreply.github.com>
Date: Mon, 10 Aug 2026 11:27:41 +0200
Subject: [PATCH 3/4] Adjust yaml format

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 .github/workflows/dependabot-auto-changelog.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/dependabot-auto-changelog.yml b/.github/workflows/dependabot-auto-changelog.yml
index bd9da9d5..2f3e899f 100644
--- a/.github/workflows/dependabot-auto-changelog.yml
+++ b/.github/workflows/dependabot-auto-changelog.yml
@@ -13,7 +13,7 @@ jobs:
       contents: write
 
     steps:
-    - uses: actions/checkout@v7
-    - uses: crambl/dependabot-changelog-writer@478f44ae023312b697349f9d12b646936020936f  #v1.3.1
-      with:
-        section-header: 'Maintenance'
+      - uses: actions/checkout@v7
+      - uses: crambl/dependabot-changelog-writer@478f44ae023312b697349f9d12b646936020936f  #v1.3.1
+        with:
+          section-header: 'Maintenance'

From 63c9bcd00f3cdd6894c9cae8e00b3479c7ac20cf Mon Sep 17 00:00:00 2001
From: Hauke Schulz <43613877+observingClouds@users.noreply.github.com>
Date: Mon, 10 Aug 2026 11:41:04 +0200
Subject: [PATCH 4/4] document changes

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4ff85253..04e8181a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -83,6 +83,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Maintenance
 
+- Setup dependabot to keep dependencies up-to-date. [\#718]((https://github.com/mllam/neural-lam/pull/718) @observingClouds
+
 - Split the monolithic `neural_lam/utils.py` into a `neural_lam/utils/` package with one module per concern (`buffer_list`, `graph`, `networks`, `plot`, `logging`, `tensor`, `time`); `utils/__init__.py` re-exports the full public API so existing imports are unaffected. Pure code movement, no behavioural change. [\#682](https://github.com/mllam/neural-lam/pull/682) @Sir-Sloth-The-Lazy
 
 - Add comprehensive type hints to GraphLAM in `neural_lam/models/step_predictors/graph/graph_lam.py` [\#669](https://github.com/mllam/neural-lam/pull/669) @GiGiKoneti