chore(api): python trusted publisher

Author: stainless-app[bot]

.github/workflows/publish-pypi.yml

@@ -12,6 +12,9 @@ jobs:
   publish:
     name: publish
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
       - uses: actions/checkout@v6
@@ -27,5 +30,3 @@ jobs:
       - name: Publish to PyPI
         run: |
           bash ./bin/publish-pypi
-        env:
-          PYPI_TOKEN: ${{ secrets.HYPERSPELL_PYPI_TOKEN || secrets.PYPI_TOKEN }}

.github/workflows/release-doctor.yml

@@ -17,5 +17,3 @@ jobs:
       - name: Check release environment
         run: |
           bash ./bin/check-release-environment
-        env:
-          PYPI_TOKEN: ${{ secrets.HYPERSPELL_PYPI_TOKEN || secrets.PYPI_TOKEN }}

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 23
 openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/hyperspell%2Fhyperspell-ca07e6605f61ae00e12be55df648b38e467a31d505fdeec7879c8a9ea9e1b390.yml
 openapi_spec_hash: 25915d4fcda54adbd8a7f106d8af2d65
-config_hash: 4d9c48f9271d8bde9f997e7501429607
+config_hash: fd3005a8f140e5baadd3d25b3c9cd79f

bin/check-release-environment

@@ -2,10 +2,6 @@
 
 errors=()
 
-if [ -z "${PYPI_TOKEN}" ]; then
-  errors+=("The PYPI_TOKEN secret has not been set. Please set it in either this repository's secrets or your organization secrets.")
-fi
-
 lenErrors=${#errors[@]}
 
 if [[ lenErrors -gt 0 ]]; then

bin/publish-pypi

@@ -3,4 +3,8 @@
 set -eux
 mkdir -p dist
 rye build --clean
-rye publish --yes --token=$PYPI_TOKEN
+if [ -n "${PYPI_TOKEN:-}" ]; then
+  rye publish --yes --token=$PYPI_TOKEN
+else
+  rye publish --yes
+fi