release: 9.0.0 (#643)

* chore(internal): update lock file

* chore(ci): upgrade `actions/github-script`

* feat(api): add per endpoint security

* chore(internal): codegen related update

* fix(tests): skip broken date validation test

* release: 9.0.0

---------

Co-authored-by: stainless-app[bot] <142633134+stainless-app[bot]@users.noreply.github.com>

Author: stainless-app[bot]

.github/workflows/ci.yml

@@ -57,7 +57,7 @@ jobs:
       - name: Get GitHub OIDC Token
         if: github.repository == 'stainless-sdks/finch-typescript'
         id: github-oidc
-        uses: actions/github-script@v6
+        uses: actions/github-script@v8
         with:
           script: core.setOutput('github_token', await core.getIDToken());
 

.github/workflows/release-doctor.yml

@@ -19,4 +19,3 @@ jobs:
           bash ./bin/check-release-environment
         env:
           NPM_TOKEN: ${{ secrets.FINCH_NPM_TOKEN || secrets.NPM_TOKEN }}
-

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "8.2.1"
+  ".": "9.0.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 46
 openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/finch%2Ffinch-46f433f34d440aa1dfcc48cc8d822c598571b68be2f723ec99e1b4fba6c13b1e.yml
 openapi_spec_hash: 5b5cd728776723ac773900f7e8a32c05
-config_hash: 0892e2e0eeb0343a022afa62e9080dd1
+config_hash: ccdf6a5b4aaa2a0897c89ac8685d8eb0

CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 9.0.0 (2026-01-27)
+
+Full Changelog: [v8.2.1...v9.0.0](https://github.com/Finch-API/finch-api-node/compare/v8.2.1...v9.0.0)
+
+### Features
+
+* **api:** add per endpoint security ([94b79a2](https://github.com/Finch-API/finch-api-node/commit/94b79a26ed4c2cf31656a2d086fbaa07eea665f9))
+
+
+### Bug Fixes
+
+* **tests:** skip broken date validation test ([bd1b3dc](https://github.com/Finch-API/finch-api-node/commit/bd1b3dce0aa126ce871b590a38ceb88484205bf9))
+
+
+### Chores
+
+* **ci:** upgrade `actions/github-script` ([3e7b8f0](https://github.com/Finch-API/finch-api-node/commit/3e7b8f0f4f176fb1a049826c6b54db144e1bf1c7))
+* **internal:** codegen related update ([60b9d57](https://github.com/Finch-API/finch-api-node/commit/60b9d57de7446a9b007aec3494e3558ce7d09bb7))
+* **internal:** update lock file ([fbf54dd](https://github.com/Finch-API/finch-api-node/commit/fbf54dd83c73c8e44fefb0282dd54d96b2f647f9))
+
 ## 8.2.1 (2026-01-20)
 
 Full Changelog: [v8.2.0...v8.2.1](https://github.com/Finch-API/finch-api-node/compare/v8.2.0...v8.2.1)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryfinch/finch-api",
-  "version": "8.2.1",
+  "version": "9.0.0",
   "description": "The official TypeScript library for the Finch API",
   "author": "Finch <founders@tryfinch.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryfinch/finch-api-mcp",
-  "version": "8.2.1",
+  "version": "9.0.0",
   "description": "The official MCP Server for the Finch API",
   "author": "Finch <founders@tryfinch.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/src/server.ts

@@ -21,7 +21,7 @@ export const newMcpServer = () =>
   new McpServer(
     {
       name: 'tryfinch_finch_api_api',
-      version: '8.2.1',
+      version: '9.0.0',
     },
     { capabilities: { tools: {}, logging: {} } },
   );

packages/mcp-server/yarn.lock

@@ -3302,9 +3302,6 @@ readable-stream@^3.4.0:
     string_decoder "^1.1.1"
     util-deprecate "^1.0.1"
 
-"replicate@file:../../dist":
-  version "2.0.0-alpha.74"
-
 require-directory@^2.1.1:
   version "2.1.1"
   resolved "https://registry.yarnpkg.com/require-directory/-/require-directory-2.1.1.tgz#8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"

src/client.ts

@@ -302,8 +302,14 @@ export class Finch {
     );
   }
 
-  protected async authHeaders(opts: FinalRequestOptions): Promise<NullableHeaders | undefined> {
-    return buildHeaders([await this.bearerAuth(opts), await this.basicAuth(opts)]);
+  protected async authHeaders(
+    opts: FinalRequestOptions,
+    schemes: { bearerAuth?: boolean; basicAuth?: boolean },
+  ): Promise<NullableHeaders | undefined> {
+    return buildHeaders([
+      schemes.bearerAuth ? await this.bearerAuth(opts) : null,
+      schemes.basicAuth ? await this.basicAuth(opts) : null,
+    ]);
   }
 
   protected async bearerAuth(opts: FinalRequestOptions): Promise<NullableHeaders | undefined> {
@@ -768,7 +774,7 @@ export class Finch {
         ...getPlatformHeaders(),
         'Finch-API-Version': '2020-09-17',
       },
-      await this.authHeaders(options),
+      await this.authHeaders(options, options.__security ?? { bearerAuth: true, basicAuth: true }),
       this._options.defaultHeaders,
       bodyHeaders,
       options.headers,