73 lines
3 KiB
YAML
73 lines
3 KiB
YAML
name: Release APK
|
|
|
|
on:
|
|
push:
|
|
tags: ["v*"]
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: android
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
# No actions/setup-java here on purpose: it exports JAVA_HOME, and Gradle
|
|
# prefers JAVA_HOME over PATH, so it would shadow devbox's openjdk17 with
|
|
# a JDK that Gradle 8.14.3 rejects. devbox provides the JDK.
|
|
|
|
- name: Extract version
|
|
run: |
|
|
VERSION=$(grep '^version:' pubspec.yaml | sed 's/version: //')
|
|
echo "VERSION_CODE=$(echo "$VERSION" | grep -oP '(?<=\+)\d+')" >> $GITHUB_ENV
|
|
echo "VERSION_NAME=$(echo "$VERSION" | grep -oP '^[^+]+')" >> $GITHUB_ENV
|
|
|
|
- name: Decode keystore
|
|
run: |
|
|
echo "${{ secrets.KEYSTORE_BASE64 }}" | base64 -d > android/app/kirakira-release.jks
|
|
echo "KEYSTORE_PATH=$GITHUB_WORKSPACE/android/app/kirakira-release.jks" >> $GITHUB_ENV
|
|
|
|
# jniLibs/ is gitignored, so a fresh clone has no Rust .so files. Without
|
|
# this the APK builds fine and then crashes on the first FFI call.
|
|
- name: Build Rust native libraries
|
|
run: |
|
|
env -u GITHUB_TOKEN -u GH_TOKEN -u JAVA_HOME \
|
|
devbox run build-native-android
|
|
|
|
- name: Build release APK
|
|
env:
|
|
STORE_PASSWORD: ${{ secrets.STORE_PASSWORD }}
|
|
KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
|
|
KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
|
|
run: |
|
|
# GITHUB_TOKEN is unset for devbox: it forwards it to nix as
|
|
# `--option access-tokens github.com=...`, but Forgejo's token is not
|
|
# a GitHub one, so fetching the flake-utils input 401s. Anonymous works.
|
|
env -u GITHUB_TOKEN -u GH_TOKEN -u JAVA_HOME \
|
|
devbox run -- flutter build apk --release --flavor prod
|
|
|
|
- name: Create Forgejo Release and upload APK
|
|
env:
|
|
FORGEJO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
run: |
|
|
APK="kirakira-${{ env.VERSION_NAME }}.apk"
|
|
cp build/app/outputs/flutter-apk/app-prod-release.apk "$APK"
|
|
|
|
BODY=$(python3 -c "
|
|
import json, sys
|
|
print(json.dumps(open('fastlane/metadata/android/en-US/changelogs/${{ env.VERSION_CODE }}.txt').read().strip()))
|
|
")
|
|
|
|
RELEASE_ID=$(curl -sf -X POST \
|
|
-H "Authorization: token $FORGEJO_TOKEN" \
|
|
-H "Content-Type: application/json" \
|
|
"$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases" \
|
|
-d "{\"tag_name\":\"$GITHUB_REF_NAME\",\"name\":\"$GITHUB_REF_NAME\",\"body\":$BODY}" \
|
|
| python3 -c 'import sys,json; print(json.load(sys.stdin)["id"])')
|
|
|
|
curl -sf -X POST \
|
|
-H "Authorization: token $FORGEJO_TOKEN" \
|
|
-H "Content-Type: application/vnd.android.package-archive" \
|
|
"$GITHUB_SERVER_URL/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=$APK" \
|
|
--data-binary @"$APK"
|
|
|
|
echo "Release created: $GITHUB_SERVER_URL/$GITHUB_REPOSITORY/releases/tag/$GITHUB_REF_NAME"
|