ci(build): auto-build and publish release/debug ZIPs

Three-stage pipeline: build APKs (debug + release in parallel),
package module ZIPs with bundled APK, publish GitHub release with
changelog extraction from CHANGELOG.md.

Author: Enginex0

.github/workflows/build.yml

@@ -0,0 +1,138 @@
+name: Build
+
+on:
+  push:
+    branches: [master]
+    paths:
+      - 'app/**'
+      - 'module/**'
+      - 'gradle/**'
+      - 'build.gradle.kts'
+      - 'settings.gradle.kts'
+      - 'gradle.properties'
+      - 'scripts/**'
+      - '.github/workflows/build.yml'
+  pull_request:
+    branches: [master]
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        profile: [debug, release]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: 17
+
+      - uses: gradle/actions/setup-gradle@v4
+
+      - name: Build APK (${{ matrix.profile }})
+        run: |
+          if [ "${{ matrix.profile }}" = "release" ]; then
+            ./gradlew assembleRelease
+          else
+            ./gradlew assembleDebug
+          fi
+
+      - name: Upload APK
+        uses: actions/upload-artifact@v4
+        with:
+          name: apk-${{ matrix.profile }}
+          path: app/build/outputs/apk/${{ matrix.profile }}/app-${{ matrix.profile }}.apk
+          retention-days: 7
+
+  package:
+    needs: build
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        profile: [debug, release]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Download APK
+        uses: actions/download-artifact@v4
+        with:
+          name: apk-${{ matrix.profile }}
+          path: apk/
+
+      - name: Read version
+        id: ver
+        run: echo "version=$(grep '^version=' module/module.prop | cut -d= -f2)" >> "$GITHUB_OUTPUT"
+
+      - name: Package module ZIP
+        run: |
+          bash scripts/package.sh --apk=apk/app-${{ matrix.profile }}.apk
+
+      - name: Rename ZIP for profile
+        run: |
+          ver="${{ steps.ver.outputs.version }}"
+          src="out/UsbMassStorage-${ver}.zip"
+          if [ "${{ matrix.profile }}" = "debug" ]; then
+            mv "$src" "out/UsbMassStorage-${ver}-debug.zip"
+          fi
+
+      - name: Upload module ZIP
+        uses: actions/upload-artifact@v4
+        with:
+          name: module-${{ matrix.profile }}
+          path: out/UsbMassStorage-*.zip
+          retention-days: 30
+
+  release:
+    needs: [build, package]
+    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Read version
+        id: ver
+        run: echo "version=$(grep '^version=' module/module.prop | cut -d= -f2)" >> "$GITHUB_OUTPUT"
+
+      - name: Download release ZIP
+        uses: actions/download-artifact@v4
+        with:
+          name: module-release
+          path: zips/release/
+
+      - name: Download debug ZIP
+        uses: actions/download-artifact@v4
+        with:
+          name: module-debug
+          path: zips/debug/
+
+      - name: Extract changelog
+        id: notes
+        run: |
+          ver="${{ steps.ver.outputs.version }}"
+          if [ -f CHANGELOG.md ]; then
+            awk "/^## ${ver}/{flag=1; next} /^## v/{if(flag) exit} flag" CHANGELOG.md > /tmp/notes.md
+          fi
+          if [ ! -s /tmp/notes.md ]; then
+            echo "Release ${ver}" > /tmp/notes.md
+          fi
+
+      - name: Delete old release
+        run: gh release delete "${{ steps.ver.outputs.version }}" --yes 2>/dev/null || true
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create release
+        run: |
+          gh release create "${{ steps.ver.outputs.version }}" \
+            --title "${{ steps.ver.outputs.version }}" \
+            --notes-file /tmp/notes.md \
+            --latest \
+            zips/release/*.zip \
+            zips/debug/*.zip
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

CHANGELOG.md

@@ -0,0 +1,12 @@
+## v3.1
+
+- Full app and installer localization with 32 languages
+- Auto-detect device locale during module installation
+- Accent color picker (system default, almost black, white)
+- In-app usage guide accessible from menu
+- Material 3 companion app with pull-to-refresh and bottom sheets
+- SELinux enforcing with dedicated msd_daemon domain
+- Boot guard with exponential backoff daemon respawn
+- Multi-ABI support (arm64, armv7, x86_64)
+- Create virtual disk images from the app
+- Mount up to 8 USB devices simultaneously