Merge pull request #216 from clerk/dc-speakeasy-trusted-publishing

chore(ci): Use Speakeasy Trusted Publisher feature

Author: dominic-clerk

.github/workflows/pypi_mint_token.yaml

@@ -5,7 +5,7 @@ permissions:
   pull-requests: write
   statuses: write
   id-token: write
-on:
+"on":
   workflow_dispatch:
     inputs:
       force:
@@ -18,10 +18,7 @@ on:
   schedule:
     - cron: 0 0 * * *
 jobs:
-  mint_pypi_token:
-    uses: ./.github/workflows/pypi_mint_token.yaml
   generate:
-    needs: mint_pypi_token
     uses: speakeasy-api/sdk-generation-action/.github/workflows/workflow-executor.yaml@v15
     with:
       force: ${{ github.event.inputs.force }}
@@ -30,5 +27,4 @@ jobs:
       speakeasy_version: latest
     secrets:
       github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      pypi_token: ${{ needs.mint_pypi_token.outputs.pypi_token }}
       speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}

.github/workflows/sdk_generation.yaml

@@ -5,20 +5,17 @@ permissions:
   pull-requests: write
   statuses: write
   id-token: write
-on:
+"on":
   push:
     branches:
       - main
     paths:
-      - RELEASES.md
-      - '*/RELEASES.md'
+      - .speakeasy/gen.lock
 jobs:
-  mint_pypi_token:
-    uses: ./.github/workflows/pypi_mint_token.yaml
   publish:
-    needs: mint_pypi_token
     uses: speakeasy-api/sdk-generation-action/.github/workflows/sdk-publish.yaml@v15
+    with:
+      target: clerk-sdk-python
     secrets:
       github_access_token: ${{ secrets.GITHUB_TOKEN }}
-      pypi_token: ${{ needs.mint_pypi_token.outputs.pypi_token }}
       speakeasy_api_key: ${{ secrets.SPEAKEASY_API_KEY }}

.github/workflows/sdk_publish.yaml

@@ -17,7 +17,7 @@ targets:
         output: .
         publish:
             pypi:
-                token: $pypi_token
+                useTrustedPublishing: true
         codeSamples:
             registry:
                 location: registry.speakeasyapi.dev/clerk/clerk/clerk-openapi-python-code-samples