feat: publish via GitHub Actions with npm provenance

Add .github/workflows/publish.yml that runs `npm publish --provenance`
on a version tag, and bump to 1.3.2. Required for n8n Cloud verification.

Author: JulianPscheid

.github/workflows/publish.yml

@@ -0,0 +1,53 @@
+name: Publish to npm
+
+# Publishes the package to npm with an npm provenance statement.
+# Provenance (a Sigstore build attestation) is required for n8n Cloud
+# verification and can only be generated from a CI job with OIDC, so all
+# releases must go through this workflow rather than a local `npm publish`.
+#
+# Trigger: push a version tag, e.g.
+#   git tag v1.3.2 && git push origin v1.3.2
+# The tag must match the `version` in package.json.
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  id-token: write # required for npm provenance (Sigstore OIDC)
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Verify tag matches package.json version
+        if: github.event_name == 'push'
+        run: |
+          PKG_VERSION="v$(node -p "require('./package.json').version")"
+          if [ "$PKG_VERSION" != "$GITHUB_REF_NAME" ]; then
+            echo "::error::Tag $GITHUB_REF_NAME does not match package.json version $PKG_VERSION"
+            exit 1
+          fi
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Build
+        run: npm run build
+
+      - name: Publish to npm with provenance
+        run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.3.2] - 2026-06-12
+
+### Changed
+- Publish to npm via a GitHub Actions workflow with an npm provenance statement (Sigstore build attestation), so the package build source can be cryptographically verified. Required for n8n Cloud verification; no functional change to the node.
+- User-Agent header updated to `1.3.2`.
+
 ## [1.3.1] - 2026-06-11
 
 ### Fixed

nodes/Hedy/GenericFunctions.ts

@@ -34,7 +34,7 @@ export async function hedyApiRequest(
 		url: `${baseUrl}${endpoint}`,
 		headers: {
 			'Content-Type': 'application/json',
-			'User-Agent': 'n8n-nodes-hedy/1.3.1',
+			'User-Agent': 'n8n-nodes-hedy/1.3.2',
 		},
 		qs,
 		body,

package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-hedy",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "description": "n8n nodes for Hedy - AI-powered meeting intelligence integration",
   "keywords": [
     "n8n-community-node-package",