diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 000000000..c188eaf86
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,13 @@
+# Ruby dependency surface
+Gemfile*              @wordpress-mobile/apps-infra-tooling
+.bundle/              @wordpress-mobile/apps-infra-tooling
+.rubocop*.yml         @wordpress-mobile/apps-infra-tooling
+fastlane/             @wordpress-mobile/apps-infra-tooling
+
+# CI and automation
+.buildkite/           @wordpress-mobile/apps-infra-tooling
+.github/dependabot.yml @wordpress-mobile/apps-infra-tooling
+
+# Toolchain and environment pins
+.ruby-version         @wordpress-mobile/apps-infra-tooling
+.xcode-version        @wordpress-mobile/apps-infra-tooling
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..9f15e0732
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: bundler
+    directory: /
+    schedule:
+      interval: daily
+    groups:
+      ruby-minor-and-patch:
+        update-types: [minor, patch]
+    open-pull-requests-limit: 5