ci: add permissions: contents: write for release uploads #12
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build & Release APK | ||
| on: | ||
| push: | ||
| tags: | ||
| - 'v*' # trigger on version tags like v1.0.5 | ||
| workflow_dispatch: # allow manual trigger from GitHub UI | ||
| permissions: | ||
| contents: write # needed to create GitHub Releases and upload assets | ||
| jobs: | ||
| build: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout code | ||
| uses: actions/checkout@v4 | ||
| - name: Set up JDK 17 | ||
| uses: actions/setup-java@v4 | ||
| with: | ||
| java-version: '17' | ||
| distribution: 'temurin' | ||
| - name: Set up Android SDK | ||
| uses: android-actions/setup-android@v3 | ||
| - name: Grant execute permission for gradlew | ||
| run: chmod +x gradlew | ||
| - name: Build signed release APK | ||
| env: | ||
| KEYSTORE_BASE64: ${{ secrets.KEYSTORE_BASE64 }} | ||
| KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }} | ||
| KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }} | ||
| run: ./gradlew assembleRelease --no-daemon | ||
| - name: Rename APK | ||
| run: | | ||
| VERSION=$(grep versionName app/build.gradle.kts | grep -o '"[^"]*"' | tr -d '"') | ||
| mv app/build/outputs/apk/release/app-release.apk \ | ||
| app/build/outputs/apk/release/IndoLearn-v${VERSION}.apk | ||
| echo "APK_PATH=app/build/outputs/apk/release/IndoLearn-v${VERSION}.apk" >> $GITHUB_ENV | ||
| echo "VERSION=v${VERSION}" >> $GITHUB_ENV | ||
| - name: Upload APK artifact | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: IndoLearn-release | ||
| path: ${{ env.APK_PATH }} | ||
| retention-days: 30 | ||
| - name: Create GitHub Release | ||
| if: startsWith(github.ref, 'refs/tags/') | ||
| uses: softprops/action-gh-release@v2 | ||
| with: | ||
| files: ${{ env.APK_PATH }} | ||
| tag_name: ${{ github.ref_name }} | ||
| name: "IndoLearn ${{ env.VERSION }}" | ||
| body: | | ||
| ## 更新内容 | ||
| 见 version.json changelog 字段。 | ||
| name: Build & Release APK | ||
| on: | ||
| push: | ||
| tags: | ||
| - 'v*' # trigger on version tags like v1.0.5 | ||
| workflow_dispatch: # allow manual trigger from GitHub UI | ||
| jobs: | ||
| build: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Checkout code | ||
| uses: actions/checkout@v4 | ||
| - name: Set up JDK 17 | ||
| uses: actions/setup-java@v4 | ||
| with: | ||
| java-version: '17' | ||
| distribution: 'temurin' | ||
| - name: Set up Android SDK | ||
| uses: android-actions/setup-android@v3 | ||
| - name: Grant execute permission for gradlew | ||
| run: chmod +x gradlew | ||
| - name: Build signed release APK | ||
| env: | ||
| KEYSTORE_BASE64: ${{ secrets.KEYSTORE_BASE64 }} | ||
| KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }} | ||
| KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }} | ||
| run: ./gradlew assembleRelease --no-daemon | ||
| - name: Rename APK | ||
| run: | | ||
| VERSION=$(grep versionName app/build.gradle.kts | grep -o '"[^"]*"' | tr -d '"') | ||
| mv app/build/outputs/apk/release/app-release.apk \ | ||
| app/build/outputs/apk/release/IndoLearn-v${VERSION}.apk | ||
| echo "APK_PATH=app/build/outputs/apk/release/IndoLearn-v${VERSION}.apk" >> $GITHUB_ENV | ||
| echo "VERSION=v${VERSION}" >> $GITHUB_ENV | ||
| - name: Upload APK artifact | ||
| uses: actions/upload-artifact@v4 | ||
| with: | ||
| name: IndoLearn-release | ||
| path: ${{ env.APK_PATH }} | ||
| retention-days: 30 | ||
| - name: Create GitHub Release | ||
| if: startsWith(github.ref, 'refs/tags/') | ||
| uses: softprops/action-gh-release@v2 | ||
| with: | ||
| files: ${{ env.APK_PATH }} | ||
| tag_name: ${{ github.ref_name }} | ||
| name: "IndoLearn ${{ env.VERSION }}" | ||
| body: | | ||
| ## 更新内容 | ||
| 见 version.json changelog 字段。 | ||
