diff --git a/.govuk_dependabot_merger.yml b/.govuk_dependabot_merger.yml
new file mode 100644
index 00000000..bc5c7391
--- /dev/null
+++ b/.govuk_dependabot_merger.yml
@@ -0,0 +1,11 @@
+api_version: 2
+defaults:
+  update_external_dependencies: true
+  auto_merge: true
+  allowed_semver_bumps:
+    - patch
+    - minor
+overrides:
+  - dependency: rails
+    allowed_semver_bumps:
+      - patch