release-google.yml

name: "A. Release: Google"

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version bump type'
        required: true
        type: choice
        options:
          - patch
          - minor
          - major
          - current
        default: patch
      prerelease:
        description: 'Publish as prerelease (-rc.1)'
        required: false
        default: false
        type: boolean

concurrency:
  group: ${{ github.workflow }}
  cancel-in-progress: false

env:
  GRADLE_OPTS: -Dorg.gradle.jvmargs="-Xmx4g -XX:+UseParallelGC"

permissions:
  contents: write

jobs:
  validate-android:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
    - name: Checkout
      uses: actions/checkout@v6

    - name: Set up JDK 17
      uses: actions/setup-java@v5
      with:
        java-version: '17'
        distribution: 'temurin'

    - name: Setup Gradle
      uses: gradle/gradle-build-action@v3

    - name: Grant execute permission for gradlew
      working-directory: packages/google
      run: chmod +x gradlew

    - name: Build
      working-directory: packages/google
      run: ./gradlew :openiap:build --no-daemon --stacktrace

    - name: Test
      working-directory: packages/google
      run: ./gradlew :openiap:test --no-daemon --stacktrace

  release:
    needs: [validate-android]
    runs-on: ubuntu-latest

    steps:
    - name: Checkout
      uses: actions/checkout@v6
      with:
        fetch-depth: 0

    - name: Calculate new version
      id: version
      env:
        VERSION_TYPE: ${{ github.event.inputs.version }}
        IS_PRERELEASE: ${{ github.event.inputs.prerelease }}
      run: |
        # Read current google version from openiap-versions.json
        CURRENT_VERSION=$(jq -r '.google' openiap-versions.json)
        echo "Current version: $CURRENT_VERSION"

        BASE_VERSION="${CURRENT_VERSION%%-*}"
        IFS='.' read -r MAJOR MINOR PATCH <<< "$BASE_VERSION"

        if [ "$VERSION_TYPE" = "current" ]; then
          NEW_VERSION="$CURRENT_VERSION"
          echo "Using current version (no bump): $NEW_VERSION"
          echo "skip_version_commit=true" >> $GITHUB_OUTPUT
        elif [ "$IS_PRERELEASE" = "true" ]; then
          case "$VERSION_TYPE" in
            major) MAJOR=$((MAJOR + 1)); MINOR=0; PATCH=0 ;;
            minor) MINOR=$((MINOR + 1)); PATCH=0 ;;
            patch) PATCH=$((PATCH + 1)) ;;
          esac
          NEW_VERSION="${MAJOR}.${MINOR}.${PATCH}-rc.1"
        else
          # Stable release — if current version is RC, strip prerelease without bumping
          IS_RC=$(echo "$CURRENT_VERSION" | grep -c '\-rc\.' || true)
          if [ "$IS_RC" -gt 0 ] && [ "$VERSION_TYPE" = "patch" ]; then
            NEW_VERSION="${BASE_VERSION}"
          else
            case "$VERSION_TYPE" in
              major) MAJOR=$((MAJOR + 1)); MINOR=0; PATCH=0 ;;
              minor) MINOR=$((MINOR + 1)); PATCH=0 ;;
              patch) PATCH=$((PATCH + 1)) ;;
            esac
            NEW_VERSION="${MAJOR}.${MINOR}.${PATCH}"
          fi
        fi

        echo "VERSION=$NEW_VERSION" >> $GITHUB_ENV
        echo "version=$NEW_VERSION" >> $GITHUB_OUTPUT
        if [[ "$NEW_VERSION" == *-* ]]; then
          echo "is_prerelease=true" >> "$GITHUB_OUTPUT"
        else
          echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
        fi

    - name: Check if tag already exists
      id: check_tag
      env:
        VERSION: ${{ steps.version.outputs.version }}
        SKIP_VERSION_COMMIT: ${{ steps.version.outputs.skip_version_commit }}
      run: |
        if git rev-parse "google-$VERSION" >/dev/null 2>&1; then
          if [ "$SKIP_VERSION_COMMIT" = "true" ]; then
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "⚠️ Tag google-$VERSION already exists. Will reuse existing tag (current mode)."
          else
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "❌ Tag google-$VERSION already exists. Use 'current' to retry with existing version."
            exit 1
          fi
        elif git rev-parse "google-v$VERSION" >/dev/null 2>&1; then
          if [ "$SKIP_VERSION_COMMIT" = "true" ]; then
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "⚠️ Legacy tag google-v$VERSION already exists. Will reuse existing tag (current mode)."
          else
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "❌ Legacy tag google-v$VERSION already exists. Use 'current' to retry with existing version."
            exit 1
          fi
        else
          echo "exists=false" >> $GITHUB_OUTPUT
          echo "✓ Tag google-$VERSION does not exist, proceeding with release"
        fi

    - name: Checkout release tag (current version)
      if: steps.version.outputs.skip_version_commit == 'true' && steps.check_tag.outputs.exists == 'true'
      env:
        VERSION: ${{ steps.version.outputs.version }}
      run: |
        RELEASE_TAG="google-$VERSION"
        LEGACY_TAG="google-v$VERSION"
        if git rev-parse "$RELEASE_TAG" >/dev/null 2>&1; then
          git checkout "$RELEASE_TAG"
        else
          git checkout "$LEGACY_TAG"
        fi

    - name: Update version in openiap-versions.json
      if: steps.version.outputs.skip_version_commit != 'true'
      working-directory: packages/google
      env:
        VERSION: ${{ steps.version.outputs.version }}
      run: |
        # Update version in openiap-versions.json
        jq --arg version "$VERSION" '.google = $version' ../../openiap-versions.json > temp.json
        mv temp.json ../../openiap-versions.json

    - name: Sync version files
      if: steps.version.outputs.skip_version_commit != 'true'
      run: ./scripts/sync-versions.sh

    - name: Commit version update
      if: steps.version.outputs.skip_version_commit != 'true'
      env:
        VERSION: ${{ steps.version.outputs.version }}
      run: |
        git config user.name "github-actions[bot]"
        git config user.email "github-actions[bot]@users.noreply.github.com"

        git add openiap-versions.json packages/*/openiap-versions.json
        git add packages/gql/package.json packages/docs/package.json packages/google/package.json packages/apple/package.json

        if git diff --staged --quiet; then
          echo "No version changes to commit"
        else
          git commit -m "chore(google): bump version to $VERSION"

          # Push with retry, handling concurrent release conflicts
          for i in 1 2 3; do
            # Pull latest changes before pushing
            if ! git pull --rebase origin main; then
              echo "⚠️ Rebase conflict detected, auto-resolving version files..."

              # Auto-resolve version metadata conflicts by applying only our
              # key on top of upstream. Taking ours wholesale would regress
              # other packages' versions when a concurrent release landed in
              # between (race observed 2026-04-24: google bump regressed apple
              # 2.1.3 → 2.1.2).
              for conflict_file in $(git diff --name-only --diff-filter=U); do
                case "$conflict_file" in
                  openiap-versions.json|packages/*/openiap-versions.json|packages/gql/package.json|packages/docs/package.json|packages/google/package.json|packages/apple/package.json)
                    ;;
                  *)
                    echo "❌ Unexpected conflict in $conflict_file"
                    exit 1
                    ;;
                esac
              done

              # Re-sync package metadata and docs copy after merge
              git show HEAD:openiap-versions.json > /tmp/upstream-openiap-versions.json
              jq --arg version "$VERSION" '.google = $version' /tmp/upstream-openiap-versions.json > openiap-versions.json
              ./scripts/sync-versions.sh
              git add openiap-versions.json packages/*/openiap-versions.json
              git add packages/gql/package.json packages/docs/package.json packages/google/package.json packages/apple/package.json

              GIT_EDITOR=true git rebase --continue || { echo "❌ Rebase continue failed"; exit 1; }
            fi

            if git push origin main; then
              echo "✅ Successfully pushed version update"
              break
            else
              if [ $i -lt 3 ]; then
                echo "⚠️ Push failed, retrying in $((i * 2)) seconds..."
                sleep $((i * 2))
              else
                echo "❌ Failed to push after 3 attempts"
                exit 1
              fi
            fi
          done
        fi

    - name: Set up JDK 17
      uses: actions/setup-java@v5
      with:
        java-version: '17'
        distribution: 'temurin'

    - name: Setup Gradle
      uses: gradle/gradle-build-action@v3
      with:
        cache-read-only: true

    - name: Grant execute permission for gradlew
      working-directory: packages/google
      run: chmod +x gradlew

    - name: Check if Horizon flavor already published
      id: check_horizon
      env:
        VERSION: ${{ steps.version.outputs.version }}
      run: |
        HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "https://repo1.maven.org/maven2/io/github/hyochan/openiap/openiap-google-horizon/$VERSION/" || true)
        HTTP_STATUS="${HTTP_STATUS:-000}"
        case "$HTTP_STATUS" in
          200)
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "⚠️ openiap-google-horizon $VERSION already exists on Maven Central"
            ;;
          404)
            echo "exists=false" >> $GITHUB_OUTPUT
            echo "✓ openiap-google-horizon $VERSION does not exist, will publish"
            ;;
          *)
            echo "❌ Unable to verify openiap-google-horizon $VERSION on Maven Central (HTTP $HTTP_STATUS)"
            exit 1
            ;;
        esac

    - name: Publish Horizon flavor to Maven Central
      if: steps.check_horizon.outputs.exists == 'false'
      working-directory: packages/google
      env:
        ORG_GRADLE_PROJECT_openIapVersion: ${{ steps.version.outputs.version }}
        ORG_GRADLE_PROJECT_OPENIAP_PUBLISH_VARIANT: horizon
        ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
        ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
        ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.GPG_KEY_CONTENTS }}
        ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.SIGNING_KEY_ID }}
        ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }}
      run: |
        if [ -z "$ORG_GRADLE_PROJECT_mavenCentralUsername" ]; then
          echo "⚠️ Maven Central credentials not set. Skipping publish."
        else
          ./gradlew :openiap:publishAndReleaseToMavenCentral --no-daemon --no-parallel --stacktrace
          echo "✅ Published openiap-google-horizon (Horizon flavor) to Maven Central"
        fi

    - name: Check if Play flavor already published
      id: check_play
      env:
        VERSION: ${{ steps.version.outputs.version }}
      run: |
        HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "https://repo1.maven.org/maven2/io/github/hyochan/openiap/openiap-google/$VERSION/" || true)
        HTTP_STATUS="${HTTP_STATUS:-000}"
        case "$HTTP_STATUS" in
          200)
            echo "exists=true" >> $GITHUB_OUTPUT
            echo "⚠️ openiap-google $VERSION already exists on Maven Central"
            ;;
          404)
            echo "exists=false" >> $GITHUB_OUTPUT
            echo "✓ openiap-google $VERSION does not exist, will publish"
            ;;
          *)
            echo "❌ Unable to verify openiap-google $VERSION on Maven Central (HTTP $HTTP_STATUS)"
            exit 1
            ;;
        esac

    - name: Publish Play flavor to Maven Central
      if: steps.check_play.outputs.exists == 'false'
      working-directory: packages/google
      env:
        ORG_GRADLE_PROJECT_openIapVersion: ${{ steps.version.outputs.version }}
        ORG_GRADLE_PROJECT_OPENIAP_PUBLISH_VARIANT: play
        ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
        ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
        ORG_GRADLE_PROJECT_signingInMemoryKey: ${{ secrets.GPG_KEY_CONTENTS }}
        ORG_GRADLE_PROJECT_signingInMemoryKeyId: ${{ secrets.SIGNING_KEY_ID }}
        ORG_GRADLE_PROJECT_signingInMemoryKeyPassword: ${{ secrets.SIGNING_PASSWORD }}
      run: |
        if [ -z "$ORG_GRADLE_PROJECT_mavenCentralUsername" ]; then
          echo "⚠️ Maven Central credentials not set. Skipping publish."
        else
          ./gradlew :openiap:publishAndReleaseToMavenCentral --no-daemon --no-parallel --stacktrace
          echo "✅ Published openiap-google (Play flavor) to Maven Central"
        fi

    - name: Build release artifacts
      working-directory: packages/google
      run: ./gradlew :openiap:assembleRelease --no-daemon --stacktrace

    - name: Create release artifacts
      working-directory: packages/google
      run: |
        mkdir -p release-artifacts
        shopt -s nullglob
        artifacts=(openiap/build/outputs/aar/*.aar openiap/build/libs/*.jar)
        if [ ${#artifacts[@]} -eq 0 ]; then
          echo "::error::No Google release artifacts found"
          exit 1
        fi
        cp "${artifacts[@]}" release-artifacts/
        (cd release-artifacts && shasum -a 256 * > ../checksums.txt)
        zip -r release-artifacts.zip release-artifacts/

    - name: Generate release notes
      id: release_notes
      env:
        VERSION: ${{ steps.version.outputs.version }}
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      run: |
        RELEASE_REF="HEAD"
        if git rev-parse "google-$VERSION" >/dev/null 2>&1; then
          RELEASE_REF="google-$VERSION"
        fi

        PREV_TAG=$(git for-each-ref --sort=-creatordate --format '%(refname:short)' 'refs/tags/google-*' | grep -v "$VERSION" | head -n 1)

        if [ -z "$PREV_TAG" ]; then
          echo "No previous google tag found"
          CHANGELOG="- Initial release"
        else
          echo "Generating changelog from $PREV_TAG to $RELEASE_REF"
          CHANGELOG=$(git log "$PREV_TAG..$RELEASE_REF" --pretty=format:"- %s ([\`%h\`](https://github.com/hyodotdev/openiap/commit/%H))" -- packages/google/)

          if [ -z "$CHANGELOG" ]; then
            CHANGELOG="- No direct code changes in packages/google/."
          fi
        fi

        # Save changelog to file for multiline handling
        echo "$CHANGELOG" > /tmp/changelog.txt

        # Create release notes
        cat > /tmp/release-notes.md <<EOF
        ## OpenIAP Google $VERSION

        Native Android library for the OpenIAP specification (Play + Horizon flavors, Billing 8.x).

        ### What's Changed

        $CHANGELOG

        ### Installation

        #### Google Play Store (Play flavor)

        **Gradle (Kotlin DSL):**

        \`\`\`kotlin
        dependencies {
            implementation("io.github.hyochan.openiap:openiap-google:$VERSION")
        }
        \`\`\`

        **Gradle (Groovy):**

        \`\`\`groovy
        dependencies {
            implementation 'io.github.hyochan.openiap:openiap-google:$VERSION'
        }
        \`\`\`

        #### Meta Quest / Horizon Store (Horizon flavor)

        **Gradle (Kotlin DSL):**

        \`\`\`kotlin
        dependencies {
            implementation("io.github.hyochan.openiap:openiap-google-horizon:$VERSION")
        }
        \`\`\`

        **Gradle (Groovy):**

        \`\`\`groovy
        dependencies {
            implementation 'io.github.hyochan.openiap:openiap-google-horizon:$VERSION'
        }
        \`\`\`

        ### Documentation

        - [API reference](https://openiap.dev/docs/apis)
        - [Release notes](https://openiap.dev/docs/updates/releases)
        - [GitHub (monorepo)](https://github.com/hyodotdev/openiap/tree/main/packages/google)

        ### Maven Central

        - [openiap-google (Play)](https://central.sonatype.com/artifact/io.github.hyochan.openiap/openiap-google/$VERSION)
        - [openiap-google-horizon (Horizon)](https://central.sonatype.com/artifact/io.github.hyochan.openiap/openiap-google-horizon/$VERSION)
        EOF

    - name: Create and push tag
      env:
        VERSION: ${{ steps.version.outputs.version }}
      run: |
        git config user.name "github-actions[bot]"
        git config user.email "github-actions[bot]@users.noreply.github.com"

        if git rev-parse "google-$VERSION" >/dev/null 2>&1; then
          echo "Tag google-$VERSION already exists"
        else
          git tag "google-$VERSION"
          git push origin "google-$VERSION"
        fi

    - name: Create GitHub Release
      working-directory: packages/google
      env:
        VERSION: ${{ steps.version.outputs.version }}
        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      run: |
        # Upload artifacts if they exist
        ARTIFACTS=""
        if [ -f release-artifacts.zip ]; then
          ARTIFACTS="$ARTIFACTS release-artifacts.zip"
        fi
        if [ -f checksums.txt ]; then
          ARTIFACTS="$ARTIFACTS checksums.txt"
        fi

        # Generate release notes with changelog
        PRERELEASE_FLAG=""
        if [[ "$VERSION" == *-* ]]; then
          PRERELEASE_FLAG="--prerelease"
        fi

        if gh release view "google-$VERSION" >/dev/null 2>&1; then
          echo "ℹ️ Release google-$VERSION already exists. Updating notes and artifacts."
          gh release edit "google-$VERSION" \
            --title "Google $VERSION" \
            $PRERELEASE_FLAG \
            --notes-file /tmp/release-notes.md
          if [ -n "$ARTIFACTS" ]; then
            gh release upload "google-$VERSION" $ARTIFACTS --clobber
          fi
        else
          gh release create "google-$VERSION" \
            $ARTIFACTS \
            --title "Google $VERSION" \
            $PRERELEASE_FLAG \
            --notes-file /tmp/release-notes.md
        fi