release: 9.8.0 (#655)

* feat(api): change auth to npm to oidc

as described in https://www.stainless.com/docs/sdks/typescript/#publishing-to-npm

* feat(api): api update

* docs: clarify forwards compat behavior

* docs: update with proxy auth info

* docs: update logging docs

* chore: redact api-key headers in debug logs

* release: 9.8.0

---------

Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>

Author: stainless-app[bot]

.github/workflows/publish-npm.yml

@@ -18,6 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
 
     steps:
       - uses: actions/checkout@v6
@@ -41,7 +42,6 @@ jobs:
           yarn tsn scripts/publish-packages.ts "{ \"paths_released\": \"$PATHS_RELEASED\" }"
         env:
           INPUT_PATH: ${{ github.event.inputs.path }}
-          NPM_TOKEN: ${{ secrets.FINCH_NPM_TOKEN || secrets.NPM_TOKEN }}
 
       - name: Upload MCP Server DXT GitHub release asset
         run: |

.github/workflows/release-doctor.yml

@@ -17,5 +17,3 @@ jobs:
       - name: Check release environment
         run: |
           bash ./bin/check-release-environment
-        env:
-          NPM_TOKEN: ${{ secrets.FINCH_NPM_TOKEN || secrets.NPM_TOKEN }}

.gitignore

@@ -11,3 +11,4 @@ dist-deno
 .eslintcache
 dist-bundle
 *.mcpb
+oidc

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "9.7.0"
+  ".": "9.8.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 46
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/finch/finch-326626d329d2a34acc127d7afe18edb068b1c28a8b50fecb4bb9973d3f9337a4.yml
-openapi_spec_hash: 7559424a86d6c7768cee9c650d0c156c
-config_hash: d21a244fc073152c8dbecb8ece970209
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/finch/finch-c8a0d5eca390ea3ab6e8b5b7d9b46d9a22e34d81aeab444c8ce1b5a94eba0028.yml
+openapi_spec_hash: e261a3289242d3ad52542f1491a903ee
+config_hash: 429708b67ee9e80003db82611677296c

CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## 9.8.0 (2026-05-07)
+
+Full Changelog: [v9.7.0...v9.8.0](https://github.com/Finch-API/finch-api-node/compare/v9.7.0...v9.8.0)
+
+### Features
+
+* **api:** api update ([d7d9819](https://github.com/Finch-API/finch-api-node/commit/d7d9819bda80e1c61335163a151d836b4d743551))
+* **api:** change auth to npm to oidc ([04f1246](https://github.com/Finch-API/finch-api-node/commit/04f1246dd787aec10cf13f78ad1ab910a234ebf6))
+
+
+### Chores
+
+* redact api-key headers in debug logs ([b1b7308](https://github.com/Finch-API/finch-api-node/commit/b1b7308927f0ad5e2ce0b2b50e2f37bdb8f430df))
+
+
+### Documentation
+
+* clarify forwards compat behavior ([d055d7d](https://github.com/Finch-API/finch-api-node/commit/d055d7daad62c8de922201b4a009f1babc488716))
+* update logging docs ([f3c8c59](https://github.com/Finch-API/finch-api-node/commit/f3c8c591d0514b08c3336979a96afb6fc9862bbc))
+* update with proxy auth info ([da2dfc8](https://github.com/Finch-API/finch-api-node/commit/da2dfc828d54bf3c734df9c96b6fe111d2e4f32b))
+
 ## 9.7.0 (2026-04-30)
 
 Full Changelog: [v9.6.0...v9.7.0](https://github.com/Finch-API/finch-api-node/compare/v9.6.0...v9.7.0)

bin/check-release-environment

@@ -2,10 +2,6 @@
 
 errors=()
 
-if [ -z "${NPM_TOKEN}" ]; then
-  errors+=("The NPM_TOKEN secret has not been set. Please set it in either this repository's secrets or your organization secrets")
-fi
-
 lenErrors=${#errors[@]}
 
 if [[ lenErrors -gt 0 ]]; then

bin/publish-npm

@@ -2,7 +2,12 @@
 
 set -eux
 
-npm config set '//registry.npmjs.org/:_authToken' "$NPM_TOKEN"
+if [[ ${NPM_TOKEN:-} ]]; then
+  npm config set '//registry.npmjs.org/:_authToken' "$NPM_TOKEN"
+elif [[ ! ${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-} ]]; then
+  echo "ERROR: NPM_TOKEN must be set if not running in a Github Action with id-token permission"
+  exit 1
+fi
 
 yarn build
 cd dist
@@ -57,5 +62,9 @@ else
   TAG="latest"
 fi
 
+# Install OIDC compatible npm version
+npm install --prefix ../oidc/ npm@11.6.2
+
 # Publish with the appropriate tag
-yarn publish --tag "$TAG"
+export npm_config_registry='https://registry.npmjs.org'
+../oidc/node_modules/.bin/npm publish --tag "$TAG"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryfinch/finch-api",
-  "version": "9.7.0",
+  "version": "9.8.0",
   "description": "The official TypeScript library for the Finch API",
   "author": "Finch <founders@tryfinch.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/manifest.json

@@ -1,7 +1,7 @@
 {
   "dxt_version": "0.2",
   "name": "@tryfinch/finch-api-mcp",
-  "version": "9.7.0",
+  "version": "9.8.0",
   "description": "The official MCP Server for the Finch API",
   "author": {
     "name": "Finch",