release: 1.45.0

.github/workflows/ci.yml

@@ -63,7 +63,7 @@ jobs:
       - name: Get GitHub OIDC Token
         if: github.repository == 'stainless-sdks/finch-python'
         id: github-oidc
-        uses: actions/github-script@v6
+        uses: actions/github-script@v8
         with:
           script: core.setOutput('github_token', await core.getIDToken());
 

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "1.44.1"
+  ".": "1.45.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 46
 openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/finch%2Ffinch-46f433f34d440aa1dfcc48cc8d822c598571b68be2f723ec99e1b4fba6c13b1e.yml
 openapi_spec_hash: 5b5cd728776723ac773900f7e8a32c05
-config_hash: 0892e2e0eeb0343a022afa62e9080dd1
+config_hash: ccdf6a5b4aaa2a0897c89ac8685d8eb0

CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.45.0 (2026-01-26)
+
+Full Changelog: [v1.44.1...v1.45.0](https://github.com/Finch-API/finch-api-python/compare/v1.44.1...v1.45.0)
+
+### Features
+
+* **api:** add per endpoint security ([686b27e](https://github.com/Finch-API/finch-api-python/commit/686b27e6d19cc5858b420e2b1bb265f50791c7ea))
+
+
+### Bug Fixes
+
+* **tests:** skip broken date validation test ([e22eb0f](https://github.com/Finch-API/finch-api-python/commit/e22eb0ffed3e42143600c931f2ab5b342160230c))
+
+
+### Chores
+
+* **ci:** upgrade `actions/github-script` ([f342729](https://github.com/Finch-API/finch-api-python/commit/f3427295a99f7aa4a45412f699ec6b3cc41b16c2))
+* **internal:** codegen related update ([b746d12](https://github.com/Finch-API/finch-api-python/commit/b746d12f98b1fcb287bf1b7844fc8a2d864a7d86))
+
 ## 1.44.1 (2026-01-16)
 
 Full Changelog: [v1.44.0...v1.44.1](https://github.com/Finch-API/finch-api-python/compare/v1.44.0...v1.44.1)

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "finch-api"
-version = "1.44.1"
+version = "1.45.0"
 description = "The official Python library for the Finch API"
 dynamic = ["readme"]
 license = "Apache-2.0"

src/finch/_version.py

@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "finch"
-__version__ = "1.44.1"  # x-release-please-version
+__version__ = "1.45.0"  # x-release-please-version

src/finch/resources/access_tokens.py

@@ -71,6 +71,8 @@ def create(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {"Authorization": omit, **(extra_headers or {})}
+
         if not is_given(client_id):
             if self._client.client_id is None:
                 raise ValueError(
@@ -157,6 +159,8 @@ async def create(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {"Authorization": omit, **(extra_headers or {})}
+
         if not is_given(client_id):
             if self._client.client_id is None:
                 raise ValueError(

src/finch/resources/account.py

@@ -47,6 +47,7 @@ def disconnect(
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> DisconnectResponse:
         """Disconnect one or more `access_token`s from your application."""
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._post(
             "/disconnect",
             options=make_request_options(
@@ -66,6 +67,7 @@ def introspect(
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> Introspection:
         """Read account information associated with an `access_token`"""
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get(
             "/introspect",
             options=make_request_options(
@@ -106,6 +108,7 @@ async def disconnect(
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> DisconnectResponse:
         """Disconnect one or more `access_token`s from your application."""
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._post(
             "/disconnect",
             options=make_request_options(
@@ -125,6 +128,7 @@ async def introspect(
         timeout: float | httpx.Timeout | None | NotGiven = not_given,
     ) -> Introspection:
         """Read account information associated with an `access_token`"""
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._get(
             "/introspect",
             options=make_request_options(

src/finch/resources/connect/sessions.py

@@ -104,6 +104,7 @@ def new(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._basic_auth, **(extra_headers or {})}
         return self._post(
             "/connect/sessions",
             body=maybe_transform(
@@ -177,6 +178,7 @@ def reauthenticate(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._basic_auth, **(extra_headers or {})}
         return self._post(
             "/connect/sessions/reauthenticate",
             body=maybe_transform(
@@ -278,6 +280,7 @@ async def new(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._basic_auth, **(extra_headers or {})}
         return await self._post(
             "/connect/sessions",
             body=await async_maybe_transform(
@@ -351,6 +354,7 @@ async def reauthenticate(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._basic_auth, **(extra_headers or {})}
         return await self._post(
             "/connect/sessions/reauthenticate",
             body=await async_maybe_transform(

src/finch/resources/hris/benefits/benefits.py

@@ -106,6 +106,7 @@ def create(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._post(
             "/employer/benefits",
             body=maybe_transform(
@@ -155,6 +156,7 @@ def retrieve(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get(
             f"/employer/benefits/{benefit_id}",
             options=make_request_options(
@@ -198,6 +200,7 @@ def update(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._post(
             f"/employer/benefits/{benefit_id}",
             body=maybe_transform({"description": description}, benefit_update_params.BenefitUpdateParams),
@@ -236,6 +239,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/benefits",
             page=SyncSinglePage[CompanyBenefit],
@@ -274,6 +278,7 @@ def list_supported_benefits(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/benefits/meta",
             page=SyncSinglePage[SupportedBenefit],
@@ -356,6 +361,7 @@ async def create(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._post(
             "/employer/benefits",
             body=await async_maybe_transform(
@@ -407,6 +413,7 @@ async def retrieve(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._get(
             f"/employer/benefits/{benefit_id}",
             options=make_request_options(
@@ -452,6 +459,7 @@ async def update(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._post(
             f"/employer/benefits/{benefit_id}",
             body=await async_maybe_transform({"description": description}, benefit_update_params.BenefitUpdateParams),
@@ -492,6 +500,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/benefits",
             page=AsyncSinglePage[CompanyBenefit],
@@ -530,6 +539,7 @@ def list_supported_benefits(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/benefits/meta",
             page=AsyncSinglePage[SupportedBenefit],

src/finch/resources/hris/benefits/individuals.py

@@ -83,6 +83,7 @@ def enroll_many(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._post(
             f"/employer/benefits/{benefit_id}/individuals",
             body=maybe_transform(individuals, Iterable[individual_enroll_many_params.Individual]),
@@ -126,6 +127,7 @@ def enrolled_ids(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get(
             f"/employer/benefits/{benefit_id}/enrolled",
             options=make_request_options(
@@ -172,6 +174,7 @@ def retrieve_many_benefits(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             f"/employer/benefits/{benefit_id}/individuals",
             page=SyncSinglePage[IndividualBenefit],
@@ -222,6 +225,7 @@ def unenroll_many(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._delete(
             f"/employer/benefits/{benefit_id}/individuals",
             body=maybe_transform(
@@ -295,6 +299,7 @@ async def enroll_many(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._post(
             f"/employer/benefits/{benefit_id}/individuals",
             body=await async_maybe_transform(individuals, Iterable[individual_enroll_many_params.Individual]),
@@ -338,6 +343,7 @@ async def enrolled_ids(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._get(
             f"/employer/benefits/{benefit_id}/enrolled",
             options=make_request_options(
@@ -384,6 +390,7 @@ def retrieve_many_benefits(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             f"/employer/benefits/{benefit_id}/individuals",
             page=AsyncSinglePage[IndividualBenefit],
@@ -434,6 +441,7 @@ async def unenroll_many(
         """
         if not benefit_id:
             raise ValueError(f"Expected a non-empty value for `benefit_id` but received {benefit_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._delete(
             f"/employer/benefits/{benefit_id}/individuals",
             body=await async_maybe_transform(

src/finch/resources/hris/company/company.py

@@ -74,6 +74,7 @@ def retrieve(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get(
             "/employer/company",
             options=make_request_options(
@@ -136,6 +137,7 @@ async def retrieve(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._get(
             "/employer/company",
             options=make_request_options(

src/finch/resources/hris/company/pay_statement_item/pay_statement_item.py

@@ -98,6 +98,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/pay-statement-item",
             page=SyncResponsesPage[PayStatementItemListResponse],
@@ -190,6 +191,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/pay-statement-item",
             page=AsyncResponsesPage[PayStatementItemListResponse],

src/finch/resources/hris/company/pay_statement_item/rules.py

@@ -90,6 +90,7 @@ def create(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._post(
             "/employer/pay-statement-item/rule",
             body=maybe_transform(
@@ -141,6 +142,7 @@ def update(
         """
         if not rule_id:
             raise ValueError(f"Expected a non-empty value for `rule_id` but received {rule_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._put(
             f"/employer/pay-statement-item/rule/{rule_id}",
             body=maybe_transform({"optional_property": optional_property}, rule_update_params.RuleUpdateParams),
@@ -179,6 +181,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/pay-statement-item/rule",
             page=SyncResponsesPage[RuleListResponse],
@@ -220,6 +223,7 @@ def delete(
         """
         if not rule_id:
             raise ValueError(f"Expected a non-empty value for `rule_id` but received {rule_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._delete(
             f"/employer/pay-statement-item/rule/{rule_id}",
             options=make_request_options(
@@ -294,6 +298,7 @@ async def create(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._post(
             "/employer/pay-statement-item/rule",
             body=await async_maybe_transform(
@@ -345,6 +350,7 @@ async def update(
         """
         if not rule_id:
             raise ValueError(f"Expected a non-empty value for `rule_id` but received {rule_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._put(
             f"/employer/pay-statement-item/rule/{rule_id}",
             body=await async_maybe_transform(
@@ -385,6 +391,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/pay-statement-item/rule",
             page=AsyncResponsesPage[RuleListResponse],
@@ -426,6 +433,7 @@ async def delete(
         """
         if not rule_id:
             raise ValueError(f"Expected a non-empty value for `rule_id` but received {rule_id!r}")
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return await self._delete(
             f"/employer/pay-statement-item/rule/{rule_id}",
             options=make_request_options(

src/finch/resources/hris/directory.py

@@ -71,6 +71,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/directory",
             page=SyncIndividualsPage[IndividualInDirectory],
@@ -185,6 +186,7 @@ def list(
 
           timeout: Override the client-level default timeout for this request, in seconds
         """
+        extra_headers = {**self._client._bearer_auth, **(extra_headers or {})}
         return self._get_api_list(
             "/employer/directory",
             page=AsyncIndividualsPage[IndividualInDirectory],