diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 0ef035df..1eb6f764 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,7 +1,11 @@
 version: 2
 updates:
   - package-ecosystem: 'npm'
-    directory: '/'
+    directories:
+      - '/packages/mcp'
+      - '/packages/mcp-provider-api'
+      - '/packages/mcp-provider-dx-core'
+      - '/packages/EXAMPLE-MCP-PROVIDER'
     schedule:
       interval: 'weekly'
       day: 'saturday'
diff --git a/.husky/commit-msg b/.husky/commit-msg
old mode 100755
new mode 100644
diff --git a/.husky/pre-commit b/.husky/pre-commit
old mode 100755
new mode 100644
diff --git a/.husky/pre-push b/.husky/pre-push
old mode 100755
new mode 100644
diff --git a/DEVELOPING.md b/DEVELOPING.md
index 758d938c..7b257622 100644
--- a/DEVELOPING.md
+++ b/DEVELOPING.md
@@ -137,6 +137,10 @@ The server release workflow will automatically update to the latest provider ver
 
 - For server wiring details and how providers are loaded, see `packages/mcp/DEVELOPING.md`.
 
+## Dependabot automation
+We have Dependabot enabled in this repo for the the packages listed in `.github/dependabot.yml`, if a PR passes all tests it will be automatically merged (cron job checks PRs opens every day).
+This automation is opt-in by default (just add your package dir to the dependabot config), just note that you can't enable dependabot PRs and disable automerges yet (will be addressed in the future)
+
 ## Running the MCP server locally
 
 Quick options; see `packages/mcp/DEVELOPING.md` for full details and troubleshooting.