Merge branch 'tetherto-dev' #19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Submit | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - dev | |
| jobs: | |
| android: | |
| runs-on: ubuntu-24.04 | |
| outputs: | |
| version: ${{ steps.meta.outputs.VERSION }} | |
| steps: | |
| - name: cleanup | |
| run: | | |
| # Remove .NET SDKs | |
| sudo rm -rf /usr/share/dotnet | |
| # Remove Swift toolchain | |
| sudo rm -rf /usr/share/swift | |
| # Remove Haskell (GHC) | |
| sudo rm -rf /usr/local/.ghcup | |
| # Remove Julia | |
| sudo rm -rf /usr/local/julia* | |
| sudo rm -rf /opt/microsoft /opt/google | |
| # Remove Azure CLI | |
| sudo rm -rf /opt/az | |
| # Remove PowerShell | |
| sudo rm -rf /usr/local/share/powershell | |
| sudo rm -rf /opt/hostedtoolcache | |
| docker system prune -af || true | |
| docker builder prune -af || true | |
| df -h | |
| - uses: actions/checkout@v6 | |
| with: | |
| submodules: true | |
| token: ${{ secrets.PAT_TOKEN }} | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22 | |
| - name: Setup Java 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| distribution: temurin | |
| java-version: "17" | |
| - name: Setup Android SDK | |
| uses: android-actions/setup-android@v3 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| registry-url: "https://npm.pkg.github.com" | |
| scope: "@tetherto" | |
| - name: Install worker dependencies | |
| run: | | |
| git config --global url."https://${{ secrets.PAT_TOKEN }}:x-oauth-basic@github.com/".insteadOf "ssh://git@github.com/" | |
| git config --global url."https://${{ secrets.PAT_TOKEN }}:x-oauth-basic@github.com/".insteadOf "git@github.com:" | |
| git config --global url."https://${{ secrets.PAT_TOKEN }}:x-oauth-basic@github.com/".insteadOf "https://github.com/" | |
| npm install --install-links --legacy-peer-deps | |
| env: | |
| NODE_AUTH_TOKEN: ${{ secrets.PAT_TOKEN }} | |
| - name: Generate worklet bundle for Android | |
| run: npm run bundle:android | |
| - name: Install EAS CLI | |
| run: npm install --global eas-cli | |
| - name: Write Google Play service account key | |
| env: | |
| GOOGLE_SERVICE_ACCOUNT_KEY_JSON: ${{ secrets.GOOGLE_SERVICE_ACCOUNT_KEY_JSON }} | |
| run: | | |
| echo "$GOOGLE_SERVICE_ACCOUNT_KEY_JSON" > $GITHUB_WORKSPACE/google-service-account.json | |
| - name: Resolve EAS profile by branch | |
| id: branch_profile | |
| run: | | |
| if [ "${GITHUB_REF##*/}" = "main" ]; then | |
| PROFILE=production | |
| else | |
| PROFILE=preview | |
| fi | |
| echo "PROFILE=$PROFILE" >> "$GITHUB_OUTPUT" | |
| - name: Read version & enforce semantic versioning | |
| id: meta | |
| run: | | |
| VERSION=$(jq -r '.expo.version' app.json) | |
| if ! [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then | |
| echo "Error: expo.version ($VERSION) must be MAJOR.MINOR.PATCH." >&2 | |
| exit 1 | |
| fi | |
| echo "VERSION=$VERSION" >> "$GITHUB_OUTPUT" | |
| - name: Add -dev suffix to expo.version for dev branch (Android) | |
| if: github.ref == 'refs/heads/dev' | |
| run: | | |
| BASE_VERSION="${{ steps.meta.outputs.VERSION }}" | |
| DEV_VERSION="${BASE_VERSION%-dev}-dev" | |
| tmp=$(mktemp) | |
| jq --arg v "$DEV_VERSION" '.expo.version = $v' app.json > "$tmp" | |
| mv "$tmp" app.json | |
| echo "expo.version updated to: $DEV_VERSION (Android dev build)" | |
| - name: Run custom expo prebuild | |
| run: npm run custom-prebuild:android | |
| - name: EAS build (Android local) with auto submit | |
| env: | |
| EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }} | |
| EXPO_GOOGLE_SERVICE_ACCOUNT_KEY_PATH: "${{ env.GITHUB_WORKSPACE }}/google-service-account.json" | |
| CREDENTIALS_JSON: ${{ secrets.CREDENTIALS_JSON }} | |
| GOOGLE_PLAY_KEYSTORE: ${{ secrets.GOOGLE_PLAY_KEYSTORE }} | |
| SLACK_WEBHOOK_URL_PATH: ${{ secrets.SLACK_WEBHOOK_URL_PATH }} | |
| GOOGLE_FORM_KEY: ${{ secrets.GOOGLE_FORM_KEY }} | |
| GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.GOOGLE_FORM_MAPPING_TOPIC }} | |
| GOOGLE_FORM_MAPPING_APP: ${{ secrets.GOOGLE_FORM_MAPPING_APP }} | |
| GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.GOOGLE_FORM_MAPPING_MESSAGE }} | |
| GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| TEST_SLACK_WEBHOOK_URL_PATH: ${{ secrets.TEST_SLACK_WEBHOOK_URL_PATH }} | |
| TEST_GOOGLE_FORM_KEY: ${{ secrets.TEST_GOOGLE_FORM_KEY }} | |
| TEST_GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| TEST_GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TOPIC }} | |
| TEST_GOOGLE_FORM_MAPPING_APP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP }} | |
| TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| TEST_GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_MESSAGE }} | |
| TEST_GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| IOS_APP_GROUP_ID: ${{ secrets.IOS_APP_GROUP_ID }} | |
| run: | | |
| mkdir -p android/keystores | |
| echo $GOOGLE_PLAY_KEYSTORE | base64 -d > android/keystores/release.keystore | |
| echo $CREDENTIALS_JSON | base64 -d > credentials.json | |
| # CHANGED: add branch-aware profile | |
| eas build --platform android --profile ${{ steps.branch_profile.outputs.PROFILE }} --local --non-interactive | |
| - name: Resolve APK profile by branch | |
| id: apk_profile | |
| run: | | |
| if [ "${GITHUB_REF##*/}" = "main" ]; then | |
| APK_PROFILE=production-apk | |
| else | |
| APK_PROFILE=preview-apk | |
| fi | |
| echo "APK_PROFILE=$APK_PROFILE" >> "$GITHUB_OUTPUT" | |
| - name: Build APK for GitHub release | |
| env: | |
| EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }} | |
| run: | | |
| eas build --platform android --profile ${{ steps.apk_profile.outputs.APK_PROFILE }} --local --non-interactive | |
| - name: Find and rename Android artifacts | |
| id: find_android | |
| run: | | |
| set -euo pipefail | |
| VERSION="${{ steps.meta.outputs.VERSION }}" | |
| AAB_PATH=$(find "$GITHUB_WORKSPACE" -name "*.aab" -type f | head -n 1 || true) | |
| echo "Original AAB: $AAB_PATH" | |
| if [ -n "$AAB_PATH" ]; then | |
| NEW_AAB="PearPass-Mobile-Android-v${VERSION}.aab" | |
| NEW_AAB_PATH="$GITHUB_WORKSPACE/$NEW_AAB" | |
| mv "$AAB_PATH" "$NEW_AAB_PATH" | |
| echo "AAB_PATH=$NEW_AAB_PATH" >> "$GITHUB_OUTPUT" | |
| else | |
| echo "No .aab file found." | |
| echo "AAB_PATH=" >> "$GITHUB_OUTPUT" | |
| fi | |
| APK_PATH=$(find "$GITHUB_WORKSPACE" -name "*.apk" -type f | head -n 1 || true) | |
| echo "Original APK: $APK_PATH" | |
| if [ -n "$APK_PATH" ]; then | |
| NEW_APK="PearPass-Mobile-Android-v${VERSION}.apk" | |
| NEW_APK_PATH="$GITHUB_WORKSPACE/$NEW_APK" | |
| mv "$APK_PATH" "$NEW_APK_PATH" | |
| echo "APK_PATH=$NEW_APK_PATH" >> "$GITHUB_OUTPUT" | |
| else | |
| echo "No .apk file found." | |
| echo "APK_PATH=" >> "$GITHUB_OUTPUT" | |
| fi | |
| VERSION_CODE=$(jq -r '.expo.android.versionCode' app.json) | |
| TIMESTAMP=$(date +%Y%m%d-%H%M%S) | |
| echo "VERSION_CODE=$VERSION_CODE" >> "$GITHUB_OUTPUT" | |
| echo "TIMESTAMP=$TIMESTAMP" >> "$GITHUB_OUTPUT" | |
| - name: Upload Android AAB artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: PearPass-Mobile-Android-v${{ steps.meta.outputs.VERSION }}.aab | |
| path: ${{ steps.find_android.outputs.AAB_PATH }} | |
| if-no-files-found: ignore | |
| - name: Upload Android APK artifact | |
| if: steps.find_android.outputs.APK_PATH != '' | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: PearPass-Mobile-Android-v${{ steps.meta.outputs.VERSION }}.apk | |
| path: ${{ steps.find_android.outputs.APK_PATH }} | |
| if-no-files-found: error | |
| - name: Submit to Google play via EAS | |
| env: | |
| EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }} | |
| EXPO_GOOGLE_SERVICE_ACCOUNT_KEY_PATH: "${{ env.GITHUB_WORKSPACE }}/google-service-account.json" | |
| CREDENTIALS_JSON: ${{ secrets.CREDENTIALS_JSON }} | |
| GOOGLE_PLAY_KEYSTORE: ${{ secrets.GOOGLE_PLAY_KEYSTORE }} | |
| SLACK_WEBHOOK_URL_PATH: ${{ secrets.SLACK_WEBHOOK_URL_PATH }} | |
| GOOGLE_FORM_KEY: ${{ secrets.GOOGLE_FORM_KEY }} | |
| GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.GOOGLE_FORM_MAPPING_TOPIC }} | |
| GOOGLE_FORM_MAPPING_APP: ${{ secrets.GOOGLE_FORM_MAPPING_APP }} | |
| GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.GOOGLE_FORM_MAPPING_MESSAGE }} | |
| GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| TEST_SLACK_WEBHOOK_URL_PATH: ${{ secrets.TEST_SLACK_WEBHOOK_URL_PATH }} | |
| TEST_GOOGLE_FORM_KEY: ${{ secrets.TEST_GOOGLE_FORM_KEY }} | |
| TEST_GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| TEST_GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TOPIC }} | |
| TEST_GOOGLE_FORM_MAPPING_APP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP }} | |
| TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| TEST_GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_MESSAGE }} | |
| TEST_GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| IOS_APP_GROUP_ID: ${{ secrets.IOS_APP_GROUP_ID }} | |
| run: | | |
| if [ -n "${{ steps.find_android.outputs.AAB_PATH }}" ]; then | |
| eas submit -p android --path ${{ steps.find_android.outputs.AAB_PATH }} --non-interactive | |
| else | |
| echo "No AAB found; skipping Android submit." | |
| fi | |
| ios: | |
| runs-on: macos-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| submodules: true | |
| token: ${{ secrets.PAT_TOKEN }} | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22 | |
| registry-url: "https://npm.pkg.github.com" | |
| scope: "@tetherto" | |
| - name: Install Apple WWDRC Authority | |
| run: | | |
| curl -O https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer | |
| sudo security add-trusted-cert -d -r unspecified -k ~/Library/Keychains/login.keychain-db AppleWWDRCAG3.cer | |
| - name: Install worker dependencies | |
| run: | | |
| git config --global url."https://${{ secrets.PAT_TOKEN }}:x-oauth-basic@github.com/".insteadOf "ssh://git@github.com/" | |
| git config --global url."https://${{ secrets.PAT_TOKEN }}:x-oauth-basic@github.com/".insteadOf "git@github.com:" | |
| git config --global url."https://${{ secrets.PAT_TOKEN }}:x-oauth-basic@github.com/".insteadOf "https://github.com/" | |
| npm install --install-links --legacy-peer-deps | |
| env: | |
| NODE_AUTH_TOKEN: ${{ secrets.PAT_TOKEN }} | |
| - name: Generate worklet bundle for iOS | |
| run: npm run bundle:ios | |
| - name: Generate worklet bundle for iOS extension | |
| run: npm run bundle:ios-extension | |
| - name: Extract translations | |
| run: | | |
| npm run lingui:extract | |
| npm run lingui:compile | |
| - name: Install EAS CLI | |
| run: npm install --global eas-cli | |
| - name: Resolve EAS profile by branch | |
| id: branch_profile | |
| run: | | |
| if [ "${GITHUB_REF##*/}" = "main" ]; then | |
| PROFILE=production | |
| else | |
| PROFILE=preview | |
| fi | |
| echo "PROFILE=$PROFILE" >> "$GITHUB_OUTPUT" | |
| - name: Run custom expo prebuild | |
| run: npm run custom-prebuild:ios | |
| - name: EAS build (iOS local) with auto submit | |
| env: | |
| EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }} | |
| CREDENTIALS_JSON: ${{ secrets.CREDENTIALS_JSON }} | |
| APPLE_PROVISIONING_PROFILE: ${{ secrets.APPLE_PROVISIONING_PROFILE }} | |
| APPLE_PROVISIONING_PROFILE_AUTOFILL: ${{ secrets.APPLE_PROVISIONING_PROFILE_AUTOFILL }} | |
| APPLE_DISTRIBUTION_CERTIFICATE: ${{ secrets.APPLE_DISTRIBUTION_CERTIFICATE }} | |
| SLACK_WEBHOOK_URL_PATH: ${{ secrets.SLACK_WEBHOOK_URL_PATH }} | |
| GOOGLE_FORM_KEY: ${{ secrets.GOOGLE_FORM_KEY }} | |
| GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.GOOGLE_FORM_MAPPING_TOPIC }} | |
| GOOGLE_FORM_MAPPING_APP: ${{ secrets.GOOGLE_FORM_MAPPING_APP }} | |
| GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.GOOGLE_FORM_MAPPING_MESSAGE }} | |
| GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| TEST_SLACK_WEBHOOK_URL_PATH: ${{ secrets.TEST_SLACK_WEBHOOK_URL_PATH }} | |
| TEST_GOOGLE_FORM_KEY: ${{ secrets.TEST_GOOGLE_FORM_KEY }} | |
| TEST_GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| TEST_GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TOPIC }} | |
| TEST_GOOGLE_FORM_MAPPING_APP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP }} | |
| TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| TEST_GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_MESSAGE }} | |
| TEST_GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| IOS_APP_GROUP_ID: ${{ secrets.IOS_APP_GROUP_ID }} | |
| run: | | |
| mkdir -p ios/certs | |
| echo $APPLE_PROVISIONING_PROFILE | base64 -d > ios/certs/profile.mobileprovision | |
| echo $APPLE_PROVISIONING_PROFILE_AUTOFILL | base64 -d > ios/certs/profile-autofill.mobileprovision | |
| echo $APPLE_DISTRIBUTION_CERTIFICATE | base64 -d > ios/certs/dist-cert.p12 | |
| echo $CREDENTIALS_JSON | base64 -d > credentials.json | |
| # CHANGED: add branch-aware profile | |
| eas build --platform ios --profile ${{ steps.branch_profile.outputs.PROFILE }} --local --non-interactive | |
| - name: Find and rename IPA file | |
| id: find_ipa | |
| run: | | |
| set -euo pipefail | |
| IPA_PATH=$(find "$GITHUB_WORKSPACE" -name "*.ipa" -type f | head -n 1 || true) | |
| echo "Original IPA: $IPA_PATH" | |
| if [ -n "$IPA_PATH" ]; then | |
| VERSION=$(jq -r '.expo.version' app.json) | |
| echo "App version: $VERSION" | |
| NEW_NAME="PearPass-Mobile-iOS-v${VERSION}.ipa" | |
| NEW_PATH="$GITHUB_WORKSPACE/$NEW_NAME" | |
| mv "$IPA_PATH" "$NEW_PATH" | |
| echo "Renamed IPA to: $NEW_PATH" | |
| echo "IPA_PATH=$NEW_PATH" >> "$GITHUB_OUTPUT" | |
| echo "VERSION=$VERSION" >> "$GITHUB_OUTPUT" | |
| else | |
| echo "No .ipa file found." | |
| echo "IPA_PATH=" >> "$GITHUB_OUTPUT" | |
| fi | |
| TIMESTAMP=$(date +%Y%m%d-%H%M%S) | |
| echo "TIMESTAMP=$TIMESTAMP" >> "$GITHUB_OUTPUT" | |
| - name: Upload IPA artifact | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: PearPass-Mobile-iOS-v${{ steps.find_ipa.outputs.VERSION }}.ipa | |
| path: ${{ steps.find_ipa.outputs.IPA_PATH }} | |
| if-no-files-found: error | |
| # CHANGED: Submit to App Store only on main | |
| - name: Submit to Apple App Store via EAS | |
| env: | |
| EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }} | |
| APPLE_APIKEY: ${{ secrets.APPLE_APIKEY }} | |
| EXPO_ASC_API_KEY_PATH: "${{ env.GITHUB_WORKSPACE }}/apple-asc-api-key.p8" | |
| EXPO_ASC_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }} | |
| EXPO_ASC_API_ISSUER_ID: ${{ secrets.APPLE_API_ISSUER_ID }} | |
| EXPO_APPLE_TEAM_ID: "77ZH693K52" | |
| EXPO_APPLE_TEAM_TYPE: "COMPANY_OR_ORGANIZATION" | |
| CREDENTIALS_JSON: ${{ secrets.CREDENTIALS_JSON }} | |
| APPLE_PROVISIONING_PROFILE: ${{ secrets.APPLE_PROVISIONING_PROFILE }} | |
| APPLE_DISTRIBUTION_CERTIFICATE: ${{ secrets.APPLE_DISTRIBUTION_CERTIFICATE }} | |
| SLACK_WEBHOOK_URL_PATH: ${{ secrets.SLACK_WEBHOOK_URL_PATH }} | |
| GOOGLE_FORM_KEY: ${{ secrets.GOOGLE_FORM_KEY }} | |
| GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.GOOGLE_FORM_MAPPING_TOPIC }} | |
| GOOGLE_FORM_MAPPING_APP: ${{ secrets.GOOGLE_FORM_MAPPING_APP }} | |
| GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.GOOGLE_FORM_MAPPING_MESSAGE }} | |
| GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| TEST_SLACK_WEBHOOK_URL_PATH: ${{ secrets.TEST_SLACK_WEBHOOK_URL_PATH }} | |
| TEST_GOOGLE_FORM_KEY: ${{ secrets.TEST_GOOGLE_FORM_KEY }} | |
| TEST_GOOGLE_FORM_MAPPING_TIMESTAMP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TIMESTAMP }} | |
| TEST_GOOGLE_FORM_MAPPING_TOPIC: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_TOPIC }} | |
| TEST_GOOGLE_FORM_MAPPING_APP: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP }} | |
| TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_OPERATING_SYSTEM }} | |
| TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_DEVICE_MODEL }} | |
| TEST_GOOGLE_FORM_MAPPING_MESSAGE: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_MESSAGE }} | |
| TEST_GOOGLE_FORM_MAPPING_APP_VERSION: ${{ secrets.TEST_GOOGLE_FORM_MAPPING_APP_VERSION }} | |
| IOS_APP_GROUP_ID: ${{ secrets.IOS_APP_GROUP_ID }} | |
| run: | | |
| echo $APPLE_APIKEY | base64 -d > apple-asc-api-key.p8 | |
| eas submit -p ios --path ${{ steps.find_ipa.outputs.IPA_PATH }} --non-interactive | |
| mobile_release: | |
| name: Create unified Mobile release (IPA & AAB) | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| needs: [android, ios] | |
| if: github.ref == 'refs/heads/main' | |
| steps: | |
| - name: Download Android AAB artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: PearPass-Mobile-Android-v${{ needs.android.outputs.version }}.aab | |
| path: ./dist | |
| continue-on-error: false | |
| - name: Download Android APK artifact | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: PearPass-Mobile-Android-v${{ needs.android.outputs.version }}.apk | |
| path: ./dist | |
| continue-on-error: false | |
| - name: Download iOS artifacts | |
| uses: actions/download-artifact@v4 | |
| with: | |
| name: PearPass-Mobile-iOS-v${{ needs.android.outputs.version }}.ipa | |
| path: ./dist | |
| continue-on-error: false | |
| - name: Inspect collected artifacts | |
| run: | | |
| ls -la ./dist || true | |
| - name: Create GitHub Release (PearPass-Mobile-vX.Y.Z) | |
| uses: softprops/action-gh-release@v2 | |
| with: | |
| tag_name: v${{ needs.android.outputs.version }} | |
| name: PearPass-Mobile-v${{ needs.android.outputs.version }} | |
| generate_release_notes: true | |
| draft: false | |
| prerelease: false | |
| files: | | |
| dist/**/*.ipa | |
| dist/**/*.aab | |
| dist/**/*.apk | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |