Prod build #23
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: "Prod build" | |
on: | |
release: | |
types: [ published ] | |
concurrency: | |
group: ${{ github.workflow }}-${{ github.event.release.tag_name }} | |
cancel-in-progress: true | |
jobs: | |
code-analysis: | |
uses: ./.github/workflows/code-analysis.yml | |
ui-tests: | |
uses: ./.github/workflows/gradle-run-ui-tests.yml | |
unit-tests: | |
uses: ./.github/workflows/gradle-run-unit-tests.yml | |
secrets: inherit | |
build-app: | |
needs: [ code-analysis, ui-tests, unit-tests ] | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
with: | |
submodules: recursive # Needed in order to fetch Kalium sources for building | |
fetch-depth: 0 | |
- name: Get latest release tag | |
id: get_latest_release | |
run: | | |
latest_tag=$(curl -s https://api.github.com/repos/${{ github.repository }}/releases/latest | jq -r '.tag_name') | |
echo "::set-output name=latest_tag::$latest_tag" | |
- name: Compare versions | |
id: compare_versions | |
run: | | |
current_tag=${{ github.event.release.tag_name }} | |
latest_tag=${{ steps.get_latest_release.outputs.latest_tag }} | |
if [[ "$current_tag" == "$(echo -e "$current_tag\n$latest_tag" | sort -V | head -n1)" ]]; then | |
echo "Current tag ($current_tag) is lower than latest tag ($latest_tag). Failing the workflow." | |
exit 1 | |
else | |
echo "Current tag ($current_tag) is equal or higher than latest tag ($latest_tag). Continuing the workflow." | |
fi | |
- name: Set up JDK 17 | |
uses: buildjet/setup-java@v4 | |
with: | |
java-version: '17' | |
distribution: 'temurin' | |
cache: gradle | |
- name: Decode Keystore | |
env: | |
ENCODED_STRING: ${{ secrets.ENCODED_KEYSTORE_PUBLIC_RELEASE }} | |
run: | | |
TMP_KEYSTORE_FILE_PATH="${RUNNER_TEMP}"/keystore | |
mkdir "${TMP_KEYSTORE_FILE_PATH}" | |
echo $ENCODED_STRING | base64 -di > "${TMP_KEYSTORE_FILE_PATH}"/the.keystore | |
- name: Make gradlew executable | |
run: chmod +x ./gradlew | |
- name: Generate version file | |
run: ./gradlew generateVersionFile | |
- name: Upload version file as artifact | |
uses: actions/upload-artifact@v4 | |
with: | |
name: Version File | |
path: app/version.txt | |
- name: build prod flavour APK | |
run: | |
./gradlew app:assembleProdCompatrelease | |
env: | |
KEYSTORE_FILE_PATH_DEBUG: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_FILE_PATH_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_FILE_PATH_COMPAT: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_FILE_PATH_COMPAT_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_KEY_NAME_COMPAT_RELEASE: ${{ secrets.SIGNING_KEY_ALIAS_PUBLIC_RELEASE }} | |
KEYPWD_COMPAT_RELEASE: ${{ secrets.SIGNING_KEY_PASSWORD_PUBLIC_RELEASE }} | |
KEYSTOREPWD_COMPAT_RELEASE: ${{ secrets.SIGNING_STORE_PASSWORD_PUBLIC_RELEASE }} | |
ENABLE_SIGNING: ${{ secrets.ENABLE_SIGNING }} | |
- name: build prod flavour bundle | |
run: | |
./gradlew app:bundleProdCompatrelease | |
env: | |
KEYSTORE_FILE_PATH_DEBUG: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_FILE_PATH_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_FILE_PATH_COMPAT: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_FILE_PATH_COMPAT_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
KEYSTORE_KEY_NAME_COMPAT_RELEASE: ${{ secrets.SIGNING_KEY_ALIAS_PUBLIC_RELEASE }} | |
KEYPWD_COMPAT_RELEASE: ${{ secrets.SIGNING_KEY_PASSWORD_PUBLIC_RELEASE }} | |
KEYSTOREPWD_COMPAT_RELEASE: ${{ secrets.SIGNING_STORE_PASSWORD_PUBLIC_RELEASE }} | |
ENABLE_SIGNING: ${{ secrets.ENABLE_SIGNING }} | |
- name: Upload | |
if: success() | |
uses: actions/upload-artifact@v4 | |
with: | |
name: Build Artifacts | |
path: app/build/outputs/ | |
- name: Create service_account.json | |
run: echo '${{ secrets.SERVICE_ACCOUNT_JSON }}' > service_account.json | |
- name: Deploy to production track | |
uses: r0adkll/upload-google-play@v1 | |
with: | |
serviceAccountJson: service_account.json | |
packageName: com.wire | |
releaseFiles: app/build/outputs/bundle/prodCompatrelease/*.aab | |
track: alpha | |
- name: Deploy ProdCompatRelease to S3 | |
uses: ./.github/actions/deploy-to-s3 | |
with: | |
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
aws-bucket: ${{ secrets.AWS_S3_BUCKET }} | |
github-token: ${{ secrets.GITHUB_TOKEN }} | |
build-flavour: prod | |
build-variant: compatrelease | |
- name: Attach APK and version file to release | |
uses: softprops/[email protected] | |
with: | |
files: | | |
app/build/outputs/apk/prodCompatrelease/*.apk | |
app/version.txt |