ci: remove all secrets dependencies from release workflow

Remove DanDan API injection, SignPath code signing, and APK signing
steps to simplify the release pipeline. All artifacts are now published
unsigned directly to GitHub Releases.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: akkoaya

.github/workflows/release.yaml

@@ -44,10 +44,6 @@
           - name: Get Flutter dependencies
             run: flutter pub get
             shell: bash
-          - name: Inject DanDan API Credentials
-            run: |
-              sed -i "s/kvpx7qkqjh/${{ secrets.DANDANAPI_APPID }}/g" lib/utils/mortis.dart
-              sed -i "s/rABUaBLqdz7aCSi3fe88ZDj2gwga9Vax/${{ secrets.DANDANAPI_KEY }}/g" lib/utils/mortis.dart
           - name: Build Flutter for Android
             run: flutter build apk --split-per-abi
             shell: bash
@@ -88,79 +84,24 @@
               distribution: 'temurin'
               java-version: '18'
           - run: flutter pub get
-          - name: Inject DanDan API Credentials
-            env:
-              DANDANAPI_APPID: ${{ secrets.DANDANAPI_APPID }}
-              DANDANAPI_KEY: ${{ secrets.DANDANAPI_KEY }}
-            run: |
-              (Get-Content -Path 'lib/utils/mortis.dart') -replace "kvpx7qkqjh", "$env:DANDANAPI_APPID" | Set-Content -Path 'lib/utils/mortis.dart'
-              (Get-Content -Path 'lib/utils/mortis.dart') -replace "rABUaBLqdz7aCSi3fe88ZDj2gwga9Vax", "$env:DANDANAPI_KEY" | Set-Content -Path 'lib/utils/mortis.dart'
           - run: flutter build windows   
           - run: Compress-Archive build/windows/x64/runner/Release/* Kazumi_windows_${env:tag}.zip
           - name: Upload windows outputs
             uses: actions/upload-artifact@v4
-            id: unsigned-windows-zip-artifacts
             with:
               name: windows_outputs
               path: |
                 Kazumi_windows_*.zip
 
-          # Sign Zip
-          - run: New-Item -Path "build/windows/zip_signed_output" -ItemType Directory
-          - name: sign windows zip
-            uses: signpath/github-action-submit-signing-request@v1.1
-            with:
-              api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
-              organization-id: 'fa047255-4772-4be1-b14f-5cfa62635877'
-              project-slug: 'Kazumi'
-              signing-policy-slug: 'release-signing'
-              artifact-configuration-slug: 'Packet'
-              github-artifact-id: '${{ steps.unsigned-windows-zip-artifacts.outputs.artifact-id }}'
-              wait-for-completion: true
-              output-artifact-directory: 'build/windows/zip_signed_output'
-          
-          - name: Upload windows zip signed ouputs
-            uses: actions/upload-artifact@v4
-            id: signed-windows-zip-artifacts
-            with:
-              name: windows_zip_signed_outputs
-              path: build/windows/zip_signed_output/*.zip
-              
-          # Replace Unpacked Artifact with Signed Artifact
-          - name: Replace Unpacked Artifact with Signed Artifact
-            run: Expand-Archive -Path "build/windows/zip_signed_output/Kazumi_windows_${env:tag}.zip" -DestinationPath "build/windows/x64/runner/Release" -Force
-          
-          # Build Unsigned MSIX
-          - name: Build unsigned msix
+          # Build MSIX
+          - name: Build msix
             run: dart run msix:create
-          - name: Upload windows msix ouputs
+          - name: Upload windows msix outputs
             uses: actions/upload-artifact@v4
-            id: unsigned-windows-msix-artifacts
             with:
               name: windows_msix_outputs
               path: |
                 build/windows/x64/runner/Release/kazumi.msix
-          
-          # Sign MSIX
-          - run: New-Item -Path "build/windows/msix_signed_output" -ItemType Directory
-          - name: sign windows msix
-            uses: signpath/github-action-submit-signing-request@v1.1
-            with:
-              api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
-              organization-id: 'fa047255-4772-4be1-b14f-5cfa62635877'
-              project-slug: 'Kazumi'
-              signing-policy-slug: 'release-signing'
-              artifact-configuration-slug: 'MSIX'
-              github-artifact-id: '${{ steps.unsigned-windows-msix-artifacts.outputs.artifact-id }}'
-              wait-for-completion: true
-              output-artifact-directory: 'build/windows/msix_signed_output'
-          
-          - name: Upload windows msix signed ouputs
-            uses: actions/upload-artifact@v4
-            id: signed-windows-msix-artifacts
-            with:
-              name: windows_msix_signed_outputs
-              path: build/windows/msix_signed_output/*.msix
 
       flutter-build-linux:
         name: "Release for Linux"
@@ -201,10 +142,6 @@
           - name: Get Flutter dependencies
             run: flutter pub get
             shell: bash
-          - name: Inject DanDan API Credentials
-            run: |
-              sed -i "s/kvpx7qkqjh/${{ secrets.DANDANAPI_APPID }}/g" lib/utils/mortis.dart
-              sed -i "s/rABUaBLqdz7aCSi3fe88ZDj2gwga9Vax/${{ secrets.DANDANAPI_KEY }}/g" lib/utils/mortis.dart
           - name: Build Flutter for Linux
             run: flutter build linux
             shell: bash
@@ -282,10 +219,6 @@
               channel: stable
               flutter-version-file: pubspec.yaml
           - run: flutter pub get
-          - name: Inject DanDan API Credentials
-            run: |
-              sed -i '' "s/kvpx7qkqjh/${{ secrets.DANDANAPI_APPID }}/g" lib/utils/mortis.dart
-              sed -i '' "s/rABUaBLqdz7aCSi3fe88ZDj2gwga9Vax/${{ secrets.DANDANAPI_KEY }}/g" lib/utils/mortis.dart
           - name: Build IPA
             run: |
               flutter build ios --release --no-codesign
@@ -319,10 +252,6 @@
               channel: stable
               flutter-version-file: pubspec.yaml
           - run: flutter pub get
-          - name: Inject DanDan API Credentials
-            run: |
-              sed -i '' "s/kvpx7qkqjh/${{ secrets.DANDANAPI_APPID }}/g" lib/utils/mortis.dart
-              sed -i '' "s/rABUaBLqdz7aCSi3fe88ZDj2gwga9Vax/${{ secrets.DANDANAPI_KEY }}/g" lib/utils/mortis.dart
           - run: flutter build macos --release
           - name: Create DMG
             run: |
@@ -348,49 +277,35 @@
           - name: Extract tag name
             run: echo "tag=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
             shell: bash
-          - name: Set up JDK 17
-            uses: actions/setup-java@v4
-            with:
-              java-version: '17'
-              distribution: 'temurin'          
-          - name: Setup Android SDK
-            uses: android-actions/setup-android@v3
-          - name: Setup Android build tools
-            run: sdkmanager "build-tools;34.0.0"
-  
           - name: Download windows zip build file
             uses: actions/download-artifact@v4
             with:
-              name: windows_zip_signed_outputs
-              path: windows_zip_signed_outputs 
+              name: windows_outputs
+              path: windows_outputs
           - name: List files in windows_outputs directory
-            run: ls -l windows_zip_signed_outputs   
+            run: ls -l windows_outputs
           - name: Copy windows build file to root
-            run: cp windows_zip_signed_outputs/* Kazumi_windows_${{ env.tag }}.zip
+            run: cp windows_outputs/* Kazumi_windows_${{ env.tag }}.zip
 
           - name: Download windows msix build file
             uses: actions/download-artifact@v4
             with:
-              name: windows_msix_signed_outputs
-              path: windows_msix_signed_outputs  
-          - name: List files in windows_msix_signed_outputs directory
-            run: ls -l windows_msix_signed_outputs   
-          - name: Copy windows build file to root
-            run: cp windows_msix_signed_outputs/* Kazumi_windows_${{ env.tag }}.msix
+              name: windows_msix_outputs
+              path: windows_msix_outputs
+          - name: List files in windows_msix_outputs directory
+            run: ls -l windows_msix_outputs
+          - name: Copy windows msix build file to root
+            run: cp windows_msix_outputs/* Kazumi_windows_${{ env.tag }}.msix
 
           - name: Download android build file
             uses: actions/download-artifact@v4
             with:
               name: android_outputs
-              path: android_outputs 
+              path: android_outputs
           - name: List files in android_outputs directory
-            run: ls -l android_outputs   
-          - name: Copy android build file to unsigned floder
-            run: | 
-              mkdir build
-              mkdir build/unsigned
-              mkdir build/signed
-              cp android_outputs/* build/unsigned/Kazumi_android_${{ env.tag }}.apk
+            run: ls -l android_outputs
+          - name: Copy android build file to root
+            run: cp android_outputs/* Kazumi_android_${{ env.tag }}.apk
 
           - name: Download iOS build file
             uses: actions/download-artifact@v4
@@ -422,25 +337,11 @@
           - name: Copy linux build file to root
             run: cp linux_outputs/* .
 
-          - name: Sign APK
-            id: sign_app
-            uses: filippoLeporati93/android-release-signer@v1
-            with:
-              releaseDirectory: build/unsigned
-              signingKeyBase64: ${{ secrets.SIGNING_KEY_BASE64 }}
-              alias: ${{ secrets.KEY_ALIAS }}
-              keyStorePassword: ${{ secrets.KEY_STORE_PASSWORD }}
-            env:
-              BUILD_TOOLS_VERSION: "34.0.0"
-
-          - name: Copy Signed android build file
-            run: cp ${{steps.sign_app.outputs.signedReleaseFile}} build/signed/Kazumi_android_${{ env.tag }}.apk
-
           - name: Create release
             uses: softprops/action-gh-release@v2
             with:
               files: |
-                build/signed/*.apk
+                Kazumi_android_*.apk
                 Kazumi_windows_*.zip
                 Kazumi_windows_*.msix
                 Kazumi_macos_*.dmg