diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..e21694780
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    groups:
+      eslint:
+        patterns:
+          - "eslint*"
+      esbuild:
+        patterns:
+          - "esbuild*"
+      stylelint:
+        patterns:
+          - "stylelint*"
+      patternfly:
+        patterns:
+          - "@patternfly*"
diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
new file mode 100644
index 000000000..59f2267c0
--- /dev/null
+++ b/.github/workflows/dependabot.yml
@@ -0,0 +1,48 @@
+name: Dependabot update node-modules
+on:
+  pull_request_target:
+    types: [opened, reopened, synchronize]
+
+jobs:
+  dependabot:
+    environment: npm-update
+    permissions:
+      contents: read
+      pull-requests: write
+    timeout-minutes: 5
+    # 22.04's podman has issues with piping and causes tar errors
+    runs-on: ubuntu-20.04
+    if: ${{ github.actor == 'dependabot[bot]' }}
+
+    steps:
+      - name: Clone repository
+        uses: actions/checkout@v3
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          fetch-depth: 0
+
+      - name: Update node-modules for package.json changes
+        run: |
+          make tools/node-modules
+          git config --global user.name "GitHub Workflow"
+          git config --global user.email "cockpituous@cockpit-project.org"
+          mkdir -p ~/.config/cockpit-dev
+          echo ${{ github.token }} >> ~/.config/cockpit-dev/github-token
+          eval $(ssh-agent)
+          ssh-add - <<< '${{ secrets.NODE_CACHE_DEPLOY_KEY }}'
+          GITHUB_BASE=jelly ./tools/node-modules install
+          GITHUB_BASE=jelly ./tools/node-modules push
+          git add node_modules
+          ssh-add -D
+          ssh-agent -k
+
+      - name: Force push the change to trigger testing workflows
+        run: |
+          sleep 1 # make sure the timestamp changes
+          git commit --amend --no-edit node_modules
+          eval $(ssh-agent)
+          ssh-add - <<< '${{ secrets.SELF_DEPLOY_KEY }}'
+          git push --force 'git@github.com:${{ github.repository }}' '${{ github.head_ref }}'
+          ssh-add -D
+          ssh-agent -k
diff --git a/node_modules b/node_modules
index e267c7ebf..dc4ea5cd0 160000
--- a/node_modules
+++ b/node_modules
@@ -1 +1 @@
-Subproject commit e267c7ebf49e98ffa1f1ca965ad60756c6f657ee
+Subproject commit dc4ea5cd02749a98911984a310a5ea4c6476503e
diff --git a/package.json b/package.json
index 2dc7cfdc5..e5ff01227 100644
--- a/package.json
+++ b/package.json
@@ -15,31 +15,31 @@
     "stylelint:fix": "stylelint --fix src/*{.css,scss}"
   },
   "devDependencies": {
-    "argparse": "^2.0.1",
-    "chrome-remote-interface": "^0.32.1",
-    "esbuild": "^0.19.1",
-    "esbuild-plugin-copy": "^2.0.2",
-    "esbuild-plugin-replace": "^1.3.0",
-    "esbuild-sass-plugin": "^2.10.0",
-    "esbuild-wasm": "^0.19.1",
-    "eslint": "^8.45.0",
-    "eslint-config-standard": "^17.0.0",
-    "eslint-config-standard-jsx": "^11.0.0",
-    "eslint-config-standard-react": "^13.0.0",
-    "eslint-plugin-flowtype": "^8.0.3",
-    "eslint-plugin-import": "^2.27.5",
-    "eslint-plugin-jsx-a11y": "^6.7.1",
-    "eslint-plugin-promise": "^6.1.1",
-    "eslint-plugin-react": "^7.32.2",
-    "eslint-plugin-react-hooks": "^4.6.0",
-    "gettext-parser": "^3.0.0",
-    "htmlparser": "^1.7.7",
-    "jed": "^1.1.1",
-    "sass": "^1.59.3",
-    "sizzle": "^2.3.3",
-    "stylelint": "^14.9.1",
-    "stylelint-config-standard-scss": "^5.0.0",
-    "stylelint-formatter-pretty": "^3.1.1"
+    "argparse": "2.0.1",
+    "chrome-remote-interface": "0.32.1",
+    "esbuild": "0.19.1",
+    "esbuild-plugin-copy": "2.0.2",
+    "esbuild-plugin-replace": "1.3.0",
+    "esbuild-sass-plugin": "2.15.0",
+    "esbuild-wasm": "0.19.1",
+    "eslint": "8.45.0",
+    "eslint-config-standard": "17.0.0",
+    "eslint-config-standard-jsx": "11.0.0",
+    "eslint-config-standard-react": "13.0.0",
+    "eslint-plugin-flowtype": "8.0.3",
+    "eslint-plugin-import": "2.27.5",
+    "eslint-plugin-jsx-a11y": "6.7.1",
+    "eslint-plugin-promise": "6.1.1",
+    "eslint-plugin-react": "7.32.2",
+    "eslint-plugin-react-hooks": "4.6.0",
+    "gettext-parser": "3.0.0",
+    "htmlparser": "1.7.7",
+    "jed": "1.1.1",
+    "sass": "1.59.3",
+    "sizzle": "2.3.3",
+    "stylelint": "15.10.3",
+    "stylelint-config-standard-scss": "11.0.0",
+    "stylelint-formatter-pretty": "3.2.1"
   },
   "dependencies": {
     "@patternfly/patternfly": "5.0.4",