From c3f315755e0082d178a9e92beb90d67f52b0f03a Mon Sep 17 00:00:00 2001
From: Jan Nanista <jan.jakub.nanista@gmail.com>
Date: Tue, 21 Jan 2025 09:58:48 -0800
Subject: [PATCH 1/2] chore: Upgrade ethereum-optimism/circleci-utils orb to
 0.0.13

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 935eba0a..802bd6f4 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -7,7 +7,7 @@ executors:
 
 orbs:
   go: circleci/go@2.2.3
-  utils: ethereum-optimism/circleci-utils@0.0.12
+  utils: ethereum-optimism/circleci-utils@0.0.13
 
 commands:
   # By default, CircleCI does not checkout any submodules

From e4d818be228d79377dd592149fa44c0ab4d581d8 Mon Sep 17 00:00:00 2001
From: Jan Nanista <jan.jakub.nanista@gmail.com>
Date: Tue, 21 Jan 2025 09:59:49 -0800
Subject: [PATCH 2/2] chore: Migrate github pages publishing to CircleCI

---
 .circleci/config.yml | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 802bd6f4..2e556d48 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -109,6 +109,31 @@ jobs:
           name: Run GoReleaser
           command: goreleaser release --clean
 
+  book-build:
+    executor: default
+    environment:
+      MISE_ENV: book
+    steps:
+      - checkout
+      - install-dependencies
+      - run:
+          name: Build book
+          command: just build-book
+      - persist_to_workspace:
+          root: ./docs
+          paths:
+            - book
+
+  book-publish:
+    executor: default
+    steps:
+      - checkout
+      - attach_workspace:
+          at: /tmp/docs
+      - utils/get-github-access-token
+      - utils/github-pages-deploy:
+          src-pages-dir: /tmp/docs/book
+
 workflows:
   main:
     jobs:
@@ -118,6 +143,23 @@ workflows:
       - go-tests:
           context:
             - oplabs-rpc-urls
+      
+      # To tighten the security, we split the workflow that publishes GitHub Pages
+      # into two jobs and only expose the security context to the job that does the publishing
+      # 
+      # The build job will run on every PR to avoid unpleasant surprises if the book build fails on main
+      - book-build
+      # The publish job will only run on the main branch
+      - book-publish:
+          filters:
+            branches:
+              only:
+                - main
+          requires:
+            - book-build
+          context:
+            - circleci-repo-supersim
+
   release:
     jobs:
       - go-release: