diff --git a/.circleci/config.yml b/.circleci/config.yml
new file mode 100644
index 0000000000..d5d401c518
--- /dev/null
+++ b/.circleci/config.yml
@@ -0,0 +1,31 @@
+# Use the latest 2.1 version of CircleCI pipeline process engine.
+# See: https://circleci.com/docs/configuration-reference
+version: 2.1
+
+# Define a job to be invoked later in a workflow.
+# See: https://circleci.com/docs/jobs-steps/#jobs-overview & https://circleci.com/docs/configuration-reference/#jobs
+jobs:
+  say-hello:
+    # Specify the execution environment. You can specify an image from Docker Hub or use one of our convenience images from CircleCI's Developer Hub.
+    # See: https://circleci.com/docs/executor-intro/ & https://circleci.com/docs/configuration-reference/#executor-job
+    docker:
+      # Specify the version you desire here
+      # See: https://circleci.com/developer/images/image/cimg/base
+      - image: cimg/base:current
+
+    # Add steps to the job
+    # See: https://circleci.com/docs/jobs-steps/#steps-overview & https://circleci.com/docs/configuration-reference/#steps
+    steps:
+      # Checkout the code as the first step.
+      - checkout
+      - run:
+          name: "Say hello"
+          command: "echo Hello, World!"
+
+# Orchestrate jobs using workflows
+# See: https://circleci.com/docs/workflows/ & https://circleci.com/docs/configuration-reference/#workflows
+workflows:
+  say-hello-workflow: # This is the name of the workflow, feel free to change it to better match your workflow.
+    # Inside the workflow, you define the jobs you want to run.
+    jobs:
+      - say-hello
diff --git a/.github/workflows/on-pull-request.yml b/.github/workflows/on-pull-request.yml
index 2d38b6e8d6..07718cce46 100644
--- a/.github/workflows/on-pull-request.yml
+++ b/.github/workflows/on-pull-request.yml
@@ -39,6 +39,8 @@ jobs:
   lint_docs:
     name: Lint Documentation
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     needs: changes
     if: ${{ needs.changes.outputs.docs == 'true' }}
     steps:
diff --git a/account-kit/plugingen/package.json b/account-kit/plugingen/package.json
index b237b937aa..a9818cd148 100644
--- a/account-kit/plugingen/package.json
+++ b/account-kit/plugingen/package.json
@@ -65,7 +65,7 @@
     "change-case": "^5.4.3",
     "chokidar": "^3.6.0",
     "dedent": "^1.5.1",
-    "esbuild": "^0.20.1",
+    "esbuild": "^0.25.5",
     "find-up": "^7.0.0",
     "fs-extra": "^11.2.0",
     "ora": "^8.0.1",