diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f78906c
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - go
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels:
+      - dependencies
+      - ci
diff --git a/.github/workflows/notify-canary.yml b/.github/workflows/notify-canary.yml
new file mode 100644
index 0000000..aa4423a
--- /dev/null
+++ b/.github/workflows/notify-canary.yml
@@ -0,0 +1,23 @@
+name: Notify Canary
+
+on:
+  push:
+    branches: [main]
+  workflow_run:
+    workflows: [CI]
+    types: [completed]
+
+jobs:
+  notify:
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.repos.createDispatchEvent({
+              owner: 'pilot-protocol',
+              repo: 'pilot-canary',
+              event_type: 'canary-build',
+              client_payload: { repo: 'rendezvous', ref: context.sha }
+            });