diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..564422b
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "devcontainers"
+    directories:
+      - "/src/node"
+      - "/src/sibling-services"
+    schedule:
+      interval: "weekly"
+    groups:
+      devcontainer-features:
+        patterns: ["*"]
diff --git a/src/node/.devcontainer/devcontainer.json b/src/node/.devcontainer/devcontainer.json
index 47fa923..55ab09a 100644
--- a/src/node/.devcontainer/devcontainer.json
+++ b/src/node/.devcontainer/devcontainer.json
@@ -11,9 +11,9 @@
   "remoteUser": "node",
   "features": {
     // Shared rocicorp features (https://github.com/rocicorp/devcontainer-features):
-    //  - agents: Codex (pinned) + Claude Code + gh; persists logins across rebuilds.
+    //  - agents: Codex (pinned) + Claude Code; persists logins across rebuilds.
     //  - pnpm: corepack-managed pnpm; removes npm/npx to enforce pnpm.
-    "ghcr.io/rocicorp/devcontainer-features/agents:1": {},
+    "ghcr.io/rocicorp/devcontainer-features/agents:3": {},
     "ghcr.io/rocicorp/devcontainer-features/pnpm:1": {}
   },
   "postCreateCommand": "pnpm install"
diff --git a/src/sibling-services/.devcontainer/devcontainer.json b/src/sibling-services/.devcontainer/devcontainer.json
index a25fc29..a427fb8 100644
--- a/src/sibling-services/.devcontainer/devcontainer.json
+++ b/src/sibling-services/.devcontainer/devcontainer.json
@@ -18,9 +18,9 @@
   "remoteUser": "node",
   "features": {
     // Shared rocicorp features (https://github.com/rocicorp/devcontainer-features):
-    //  - agents: Codex (pinned) + Claude Code + gh; persists logins across rebuilds.
+    //  - agents: Codex (pinned) + Claude Code; persists logins across rebuilds.
     //  - pnpm: corepack-managed pnpm; removes npm/npx to enforce pnpm.
-    "ghcr.io/rocicorp/devcontainer-features/agents:1": {},
+    "ghcr.io/rocicorp/devcontainer-features/agents:3": {},
     "ghcr.io/rocicorp/devcontainer-features/pnpm:1": {}
   },
   "postCreateCommand": "pnpm install"