git-crypt unlock before install_gems on CI

So that we decrypt things as early as possible in the CI jobs, now that `git-crypt` doesn't need Ruby to be installed first like `configure_apply` did.

h/t @iangmaia — #14979 (comment)

Author: AliSoftware

.buildkite/commands/gradle-cache-build.sh

@@ -10,11 +10,11 @@ fi
 
 "$(dirname "${BASH_SOURCE[0]}")/restore-cache.sh"
 
-echo "--- :rubygems: Setting up Gems"
-install_gems
-
 echo "--- :closed_lock_with_key: Decrypting Secrets"
 .buildkite/commands/git-crypt-unlock.sh
 
+echo "--- :rubygems: Setting up Gems"
+install_gems
+
 echo "--- :hammer_and_wrench: Building"
 ./gradlew assembleWasabiDebug

.buildkite/commands/prototype-build.sh

@@ -9,11 +9,11 @@ fi
 
 APP_TO_BUILD="${1?You need to specify the app to build, WooCommerce or WooCommerce-Wear}"
 
-echo "--- :rubygems: Setting up Gems"
-install_gems
-
 echo "--- :closed_lock_with_key: Decrypting Secrets"
 .buildkite/commands/git-crypt-unlock.sh
 
+echo "--- :rubygems: Setting up Gems"
+install_gems
+
 echo "--- :hammer_and_wrench: Building ${APP_TO_BUILD}"
 bundle exec fastlane build_and_upload_prototype_build app:"${APP_TO_BUILD}"

.buildkite/commands/release-build.sh

@@ -2,11 +2,11 @@
 
 APP_TO_BUILD="${1?You need to specify the app to build, WooCommerce or WooCommerce-Wear}"
 
-echo "--- :rubygems: Setting up Gems"
-install_gems
-
 echo "--- :closed_lock_with_key: Decrypting Secrets"
 .buildkite/commands/git-crypt-unlock.sh
 
+echo "--- :rubygems: Setting up Gems"
+install_gems
+
 echo "--- :hammer_and_wrench: Building ${APP_TO_BUILD}"
 bundle exec fastlane build_and_upload_google_play app:"${APP_TO_BUILD}"

.buildkite/commands/run-instrumented-tests.sh

@@ -8,12 +8,12 @@ fi
 
 "$(dirname "${BASH_SOURCE[0]}")/restore-cache.sh"
 
-echo "--- :rubygems: Setting up Gems"
-install_gems
-
 echo "--- :closed_lock_with_key: Decrypting Secrets"
 .buildkite/commands/git-crypt-unlock.sh
 
+echo "--- :rubygems: Setting up Gems"
+install_gems
+
 echo "--- 🧪 Testing"
 set +e
 bundle exec fastlane build_and_instrumented_test

.buildkite/commands/run-unit-tests.sh

@@ -8,12 +8,12 @@ fi
 
 "$(dirname "${BASH_SOURCE[0]}")/restore-cache.sh"
 
-echo "--- :rubygems: Setting up Gems"
-install_gems
-
 echo "--- :closed_lock_with_key: Decrypting Secrets"
 .buildkite/commands/git-crypt-unlock.sh
 
+echo "--- :rubygems: Setting up Gems"
+install_gems
+
 echo "+++ 🧪 Testing"
 set +e
 ./gradlew testJalapenoDebugUnitTest testDebugUnitTest jacocoTestReport

.buildkite/release-pipelines/download-release-translations.yml

@@ -10,12 +10,12 @@ steps:
 
       .buildkite/commands/checkout-release-branch.sh "$RELEASE_VERSION"
 
-      echo '--- :ruby: Setup Ruby Tools'
-      install_gems
-
       echo '--- :closed_lock_with_key: Decrypting Secrets'
       .buildkite/commands/git-crypt-unlock.sh
 
+      echo '--- :ruby: Setup Ruby Tools'
+      install_gems
+
       echo '--- :globe_with_meridians: Download Release Translations'
       bundle exec fastlane download_release_translations skip_confirm:true include_wear_app:"${INCLUDE_WEAR_APP:-false}"
     agents:

.buildkite/release-pipelines/finalize-release.yml

@@ -10,12 +10,12 @@ steps:
 
       .buildkite/commands/checkout-release-branch.sh "$RELEASE_VERSION"
 
-      echo '--- :ruby: Setup Ruby Tools'
-      install_gems
-
       echo '--- :closed_lock_with_key: Decrypting Secrets'
       .buildkite/commands/git-crypt-unlock.sh
 
+      echo '--- :ruby: Setup Ruby Tools'
+      install_gems
+
       echo '--- :shipit: Finalize Release'
       bundle exec fastlane finalize_release skip_confirm:true include_wear_app:"${INCLUDE_WEAR_APP:-false}"
     agents: