diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ba3d594..73abdf0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,3 +8,11 @@ updates:
       timezone: "America/Los_Angeles"
     open-pull-requests-limit: 3
     rebase-strategy: auto
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      # Check for updates to GitHub Actions every day
+      interval: "daily"
+    open-pull-requests-limit: 3
+    rebase-strategy: auto
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 0732d87..36e33bc 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -45,6 +45,16 @@ jobs:
     uses: ./.github/workflows/pull-from-bazel-build.yml
     secrets: inherit
 
+  approve-pr:
+    needs: [check-dependabot, generate-docs]
+    if: needs.check-dependabot.outputs.should_process == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Approve pull request
+        run: gh pr review --approve "${{ github.event.pull_request.html_url }}"
+        env:
+          GH_TOKEN: ${{ secrets.GH_AUTOMERGE_PAT }}
+
   # Auto-merge after docs are generated
   enable-automerge:
     needs: [check-dependabot, generate-docs]