Merge branch 'v1.3-ossivalis'

Author: evertlammerts

.github/workflows/cleanup_pypi.yml

@@ -58,7 +58,7 @@ jobs:
           uv run --no-sync python -u -m duckdb_packaging.pypi_cleanup ${{ inputs.dry-run && '--dry' || '' }} \
             --test \
             --username "${{ vars.PYPI_CLEANUP_USERNAME }}" \
-            --max-nightlies ${{ vars.PYPI_MAX_NIGHTLIES }} > cleanup_output 2>&1
+            --max-nightlies ${{ vars.PYPI_MAX_NIGHTLIES }} 2>&1 | tee cleanup_output
 
       - name: PyPI Cleanup Summary
         run : |

.github/workflows/on_external_dispatch.yml

@@ -120,6 +120,7 @@ jobs:
     needs: [ commit_submodule, upload_s3 ]
     if: ${{ inputs.force-version == '' }}
     uses: ./.github/workflows/upload_to_pypi.yml
+    secrets: inherit
     with:
       sha: ${{ needs.commit_submodule.outputs.sha-after-commit }}
       environment: production.pypi