OnTime-front/.github/workflows/android-play-internal.yml at c22345a1aa287bc58f50d3c85f87afb96685abce · DevKor-github/OnTime-front · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
name: Android Play Internal Deploy

on:
  workflow_dispatch:
    inputs:
      release_notes:
        description: Optional Google Play release notes for en-US.
        required: false
        type: string

permissions:
  contents: read

jobs:
  deploy_internal:
    name: Build and upload internal testing draft
    runs-on: ubuntu-latest
    environment: release
    env:
      ANDROID_KEYSTORE_PATH: ${{ runner.temp }}/ontime-upload.jks
      ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
      ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
      ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
      REST_API_URL: ${{ vars.REST_API_URL }}

    steps:
      - name: Require main branch
        run: |
          if [ "$GITHUB_REF" != "refs/heads/main" ]; then
            echo "Android Play Internal Deploy must be run from main." >&2
            exit 1
          fi

      - uses: actions/checkout@v4

      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: "17"

      - uses: subosito/flutter-action@v2
        with:
          flutter-version: "3.32.6"
          channel: stable
          cache: true

      - name: Install native test dependencies
        run: sudo apt-get update && sudo apt-get install -y sqlite3 libsqlite3-dev

      - name: Validate release configuration
        env:
          ANDROID_GOOGLE_SERVICES_JSON_B64: ${{ secrets.ANDROID_GOOGLE_SERVICES_JSON_B64 }}
          ANDROID_UPLOAD_KEYSTORE_B64: ${{ secrets.ANDROID_UPLOAD_KEYSTORE_B64 }}
          GOOGLE_PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}
        run: |
          missing=0
          for name in \
            ANDROID_GOOGLE_SERVICES_JSON_B64 \
            ANDROID_UPLOAD_KEYSTORE_B64 \
            ANDROID_KEYSTORE_PASSWORD \
            ANDROID_KEY_ALIAS \
            ANDROID_KEY_PASSWORD \
            GOOGLE_PLAY_SERVICE_ACCOUNT_JSON \
            REST_API_URL
          do
            if [ -z "${!name}" ]; then
              echo "$name is required for Android Play internal deploy." >&2
              missing=1
            fi
          done
          exit "$missing"

      - name: Decode Android Firebase config
        env:
          ANDROID_GOOGLE_SERVICES_JSON_B64: ${{ secrets.ANDROID_GOOGLE_SERVICES_JSON_B64 }}
        run: |
          mkdir -p android/app/src/release
          printf '%s' "$ANDROID_GOOGLE_SERVICES_JSON_B64" | base64 --decode > android/app/src/release/google-services.json
          test -s android/app/src/release/google-services.json

      - name: Decode Android upload keystore
        env:
          ANDROID_UPLOAD_KEYSTORE_B64: ${{ secrets.ANDROID_UPLOAD_KEYSTORE_B64 }}
        run: |
          printf '%s' "$ANDROID_UPLOAD_KEYSTORE_B64" | base64 --decode > "$ANDROID_KEYSTORE_PATH"
          chmod 600 "$ANDROID_KEYSTORE_PATH"
          test -s "$ANDROID_KEYSTORE_PATH"

      - name: Install Flutter packages
        run: flutter pub get

      - name: Run code generation
        run: dart run build_runner build --delete-conflicting-outputs

      - name: Verify generated files are current
        run: git diff --exit-code

      - name: Analyze
        run: flutter analyze

      - name: Test
        run: flutter test

      - name: Build Android app bundle
        run: flutter build appbundle --release --dart-define=REST_API_URL="$REST_API_URL"

      - name: Prepare Play release notes
        if: ${{ inputs.release_notes != '' }}
        env:
          RELEASE_NOTES: ${{ inputs.release_notes }}
        run: |
          mkdir -p distribution/whatsnew
          printf '%s\n' "$RELEASE_NOTES" > distribution/whatsnew/whatsnew-en-US

      - name: Upload signed app bundle artifact
        uses: actions/upload-artifact@v4
        with:
          name: ontime-android-release-aab
          path: build/app/outputs/bundle/release/app-release.aab
          if-no-files-found: error
          retention-days: 14

      - name: Upload internal testing draft with release notes
        if: ${{ inputs.release_notes != '' }}
        uses: r0adkll/upload-google-play@v1
        with:
          serviceAccountJsonPlainText: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}
          packageName: club.devkor.ontime
          releaseFiles: build/app/outputs/bundle/release/app-release.aab
          tracks: internal
          status: draft
          whatsNewDirectory: distribution/whatsnew

      - name: Upload internal testing draft
        if: ${{ inputs.release_notes == '' }}
        uses: r0adkll/upload-google-play@v1
        with:
          serviceAccountJsonPlainText: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}
          packageName: club.devkor.ontime
          releaseFiles: build/app/outputs/bundle/release/app-release.aab
          tracks: internal
          status: draft