Add github actions

Author: michalharakal

.github/ci-gradle.properties

@@ -0,0 +1,18 @@
+org.gradle.daemon=false
+org.gradle.workers.max=2
+
+# Disable parallel execution to reduce memory pressure and AAPT2 flakiness
+org.gradle.parallel=false
+org.gradle.caching=true
+org.gradle.configuration-cache=true
+
+# Memory tuning
+org.gradle.jvmargs=-Xmx4g -Dfile.encoding=UTF-8
+
+# Kotlin daemon memory cap to reduce OOM risk
+kotlin.daemon.jvmargs=-Xmx1g
+kotlin.incremental=true
+kotlin.compiler.execution.strategy=daemon
+
+# Disable AAPT2 daemon to prevent "daemon unexpectedly exit" crashes
+android.aapt2.daemon=false

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "gradle"
+    directory: "/"
+    open-pull-requests-limit: 30
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/build.yml

@@ -0,0 +1,69 @@
+name: Build & Test
+
+on: [ push, pull_request ]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-job:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Copy CI gradle.properties
+        run: mkdir -p ~/.gradle ; cp .github/ci-gradle.properties ~/.gradle/gradle.properties
+
+      - name: Set up JDK 25
+        uses: actions/setup-java@v5
+        with:
+          distribution: 'zulu'
+          java-version: 25
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '20'
+
+      - name: Disk space (observability)
+        run: df -h
+
+      - name: Build and Test (PR)
+        if: github.event_name == 'pull_request'
+        env:
+          GRADLE_OPTS: -Dorg.gradle.jvmargs="-Xmx4g -Dfile.encoding=UTF-8"
+        run: |
+          ./gradlew --no-daemon --stacktrace --info \
+            -Dorg.gradle.caching=true \
+            -Dorg.gradle.configuration-cache=true \
+            clean assemble allTests
+
+      - name: Build and Test (push)
+        if: github.event_name != 'pull_request'
+        env:
+          GRADLE_OPTS: -Dorg.gradle.jvmargs="-Xmx4g -Dfile.encoding=UTF-8"
+        run: |
+          ./gradlew --no-daemon --stacktrace --info \
+            -Dorg.gradle.caching=true \
+            -Dorg.gradle.configuration-cache=true \
+            assemble allTests
+
+      - name: Memory info (on failure)
+        if: failure()
+        run: |
+          free -h || true
+          cat /proc/meminfo | head -n 50 || true
+
+      - name: Upload all test reports
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: test-reports
+          path: |
+            **/build/reports/tests/**
+            **/build/test-results/**
+          retention-days: 14

.github/workflows/publish.yml

@@ -0,0 +1,34 @@
+name: release
+
+on:
+  push:
+    tags:
+      - '**'
+
+jobs:
+  publish:
+    name: Release build and publish
+    runs-on: macOS-latest
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v6
+      - name: Set up JDK 25
+        uses: actions/setup-java@v5
+        with:
+          distribution: 'zulu'
+          java-version: 25
+      - name: Validate signing configuration
+        run: |
+          if ! grep -Eq '^[[:space:]]*signAllPublications[[:space:]]*=[[:space:]]*true[[:space:]]*$' gradle.properties; then
+            echo "signAllPublications must be set to true in gradle.properties to publish." >&2
+            echo "Current setting:" >&2
+            grep -n 'signAllPublications' gradle.properties || echo "No signAllPublications property found" >&2
+            exit 1
+          fi
+      - name: Publish to MavenCentral
+        run: ./gradlew publish --no-configuration-cache --stacktrace
+        env:
+          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
+          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
+          ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.GPG_PRIVATE_KEY }}
+          ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }}