lunchjs/.github/workflows/build-ios-app.yml at e38ec5ff57962fc80e596d82ac0d8846cf83acd7 · pythoninthegrasses/lunchjs · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
name: Build iOS App

on:
  # Called by release-please when a new version is released
  workflow_call:
  # Manual trigger for testing
  workflow_dispatch:
  # PR testing - only when iOS-relevant files change
  pull_request:
    branches: [main]
    paths:
      - 'src-tauri/**'
      - '!src-tauri/gen/android/**'
      - '!src-tauri/icons/android/**'
      - 'fastlane/**'
      - '!fastlane/metadata/android/**'
      - 'Taskfile.yml'
      - 'taskfiles/**'
      - '!taskfiles/android.yml'
      - 'Gemfile*'
      - 'package*.json'
      - '.github/workflows/build-ios-app.yml'

# Cancel in-progress builds when a newer one is triggered
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    runs-on: self-hosted
    env:
      BUNDLE_FROZEN: "true"
      RUBYOPT: "-W0"
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
        with:
          fetch-depth: 1

      - name: Setup Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '4.0.1'

      - name: Install Ruby dependencies
        run: bundle install

      - name: Setup Node.js
        uses: actions/setup-node@v6
        with:
          node-version: '24'

      - name: Install npm dependencies
        run: npm ci

      - name: Setup Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          targets: aarch64-apple-ios,aarch64-apple-ios-sim,x86_64-apple-ios

      - name: Ensure Tauri iOS dependencies
        run: |
          for pkg in xcodegen libimobiledevice; do
            brew list "$pkg" &>/dev/null || brew install "$pkg"
          done

      - name: Cache Task checksums
        uses: actions/cache@v5
        with:
          path: .task
          key: ${{ runner.os }}-task-v1
          restore-keys: |
            ${{ runner.os }}-task-

      - name: Cache iOS build artifacts
        uses: actions/cache@v5
        with:
          path: src-tauri/gen/apple/build
          key: ${{ runner.os }}-ios-build-${{ hashFiles('src-tauri/src/**/*.rs', 'src-tauri/Cargo.toml', 'src-tauri/Cargo.lock', 'src-tauri/tauri.conf.json', 'src-tauri/dist/**/*', 'src-tauri/icons/icon.png', 'fastlane/Fastfile', 'fastlane/Appfile') }}
          restore-keys: |
            ${{ runner.os }}-ios-build-

      - name: Install Task
        uses: go-task/setup-task@v1

      - name: Build and upload to TestFlight
        run: task ios:testflight
        env:
          FASTLANE_OPT_OUT_USAGE: 1
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_ENDPOINT_URL: ${{ secrets.AWS_ENDPOINT_URL }}
          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
          APP_STORE_CONNECT_API_KEY_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_KEY_ID }}
          APP_STORE_CONNECT_API_KEY_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ISSUER_ID }}
          APP_STORE_CONNECT_API_KEY_KEY: ${{ secrets.APP_STORE_CONNECT_API_KEY_KEY }}

      - name: Cleanup CI keychain
        if: always()
        run: |
          KEYCHAIN_PATH="$HOME/Library/Keychains/fastlane_ci-db"
          if [ -f "$KEYCHAIN_PATH" ]; then
            security delete-keychain "$KEYCHAIN_PATH" || true
          fi