feat(api): manual updates

Update config to use Trusted Publisher

Author: stainless-app[bot]

.github/workflows/publish-pypi.yml

@@ -12,6 +12,9 @@ jobs:
   publish:
     name: publish
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - uses: actions/checkout@v6
@@ -27,5 +30,3 @@ jobs:
       - name: Publish to PyPI
         run: |
           bash ./bin/publish-pypi
-        env:
-          PYPI_TOKEN: ${{ secrets.HUBSPOT_PYPI_TOKEN || secrets.PYPI_TOKEN }}

.github/workflows/release-doctor.yml

@@ -17,5 +17,3 @@ jobs:
       - name: Check release environment
         run: |
           bash ./bin/check-release-environment
-        env:
-          PYPI_TOKEN: ${{ secrets.HUBSPOT_PYPI_TOKEN || secrets.PYPI_TOKEN }}

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 959
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/hubspot/hubspot-sdk-823cfd41f503bd00779bc02af045a44617ded14a4612bc128567301eb2982763.yml
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/hubspot/hubspot-sdk-9a09454168aa8407ad8cf09c4069efe1e15dcdd41f69d811f3f9763d54ef2c83.yml
 openapi_spec_hash: 3a53f40c597fb1a8ded7d5f8939b8cc1
-config_hash: 8397c3cc951490dffa28dc7f9f0635e4
+config_hash: 79eb93dd39cf6ad577c8c1684645978a

bin/check-release-environment

@@ -2,10 +2,6 @@
 
 errors=()
 
-if [ -z "${PYPI_TOKEN}" ]; then
-  errors+=("The PYPI_TOKEN secret has not been set. Please set it in either this repository's secrets or your organization secrets.")
-fi
-
 lenErrors=${#errors[@]}
 
 if [[ lenErrors -gt 0 ]]; then

bin/publish-pypi

@@ -3,4 +3,8 @@
 set -eux
 mkdir -p dist
 rye build --clean
-rye publish --yes --token=$PYPI_TOKEN
+if [ -n "${PYPI_TOKEN:-}" ]; then
+  rye publish --yes --token=$PYPI_TOKEN
+else
+  rye publish --yes
+fi