- android-release.yml: android-v* tags build signed release APK + AAB and publish a GitHub release; ANDROID_KEYSTORE_* secrets sign with a real key, debug-cert fallback keeps APKs sideload-installable - build.gradle.kts: env-driven releaseEnv signing config - AndroidManifest: declare dataSync foregroundServiceType on SystemForegroundService (lintVitalRelease fatal, runtime crash on API 34+) - desktop-release.yml: add libfuse2 + fuse3 for the AppImage toolchain - tauri.conf.json: .deb declares fuse3 runtime dep (on-demand FUSE mode) - tauri-plugin-http pinned ~2.6 + npm @tauri-apps/plugin-http@^2.6.1: clears the tauri build version-mismatch guard (rust 2.7 vs npm 2.5) that made every desktop release build fail Verified locally: goreleaser snapshot (12 binaries), assembleRelease + bundleRelease (signed APK+AAB), cargo tauri build (.deb + .AppImage). Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>pull/3593/head
Tomas Dvorak
2 weeks ago
parent
f81ebbd1da
commit
3ac4eb7b82
@ -0,0 +1,64 @@
|
||||
name: Android Release
|
||||
|
||||
# Tag `android-v*` builds the release APK + AAB and publishes them to a
|
||||
# GitHub release. If ANDROID_KEYSTORE_* secrets are configured the
|
||||
# artifacts are signed with the real release key; otherwise the debug
|
||||
# cert is used so APKs remain sideload-installable.
|
||||
on:
|
||||
push:
|
||||
tags: ['android-v*']
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
jobs:
|
||||
release:
|
||||
runs-on: ubuntu-latest
|
||||
defaults:
|
||||
run:
|
||||
working-directory: android
|
||||
env:
|
||||
KEYSTORE_B64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- uses: actions/setup-java@v4
|
||||
with:
|
||||
distribution: temurin
|
||||
java-version: 17
|
||||
|
||||
- uses: gradle/actions/setup-gradle@v4
|
||||
|
||||
- name: Decode release keystore
|
||||
if: ${{ env.KEYSTORE_B64 != '' }}
|
||||
run: |
|
||||
echo "$KEYSTORE_B64" | base64 -d > "$RUNNER_TEMP/release.keystore"
|
||||
{
|
||||
echo "ANDROID_KEYSTORE_FILE=$RUNNER_TEMP/release.keystore"
|
||||
echo "ANDROID_KEYSTORE_PASSWORD=${{ secrets.ANDROID_KEYSTORE_PASSWORD }}"
|
||||
echo "ANDROID_KEY_ALIAS=${{ secrets.ANDROID_KEY_ALIAS }}"
|
||||
echo "ANDROID_KEY_PASSWORD=${{ secrets.ANDROID_KEY_PASSWORD }}"
|
||||
} >> "$GITHUB_ENV"
|
||||
|
||||
- name: Build release APK + AAB
|
||||
run: ./gradlew :app:assembleRelease :app:bundleRelease --console=plain
|
||||
|
||||
- name: Publish GitHub release
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: |
|
||||
APK=$(find app/build/outputs/apk/release -name 'app-release*.apk' | head -1)
|
||||
AAB=$(find app/build/outputs/bundle/release -name 'app-release*.aab' | head -1)
|
||||
cp "$APK" "cloudreve-${{ github.ref_name }}.apk"
|
||||
cp "$AAB" "cloudreve-${{ github.ref_name }}.aab"
|
||||
if [ -n "$ANDROID_KEYSTORE_FILE" ]; then
|
||||
SIG_NOTE="Signed with the release key."
|
||||
else
|
||||
SIG_NOTE="Signed with the debug certificate — sideload-installable. Configure the ANDROID_KEYSTORE_* secrets to sign with a release key."
|
||||
fi
|
||||
gh release create "${{ github.ref_name }}" \
|
||||
--title "Cloudreve Android ${{ github.ref_name }}" \
|
||||
--notes "Cloudreve Android app. ${SIG_NOTE}" \
|
||||
"cloudreve-${{ github.ref_name }}.apk" \
|
||||
"cloudreve-${{ github.ref_name }}.aab"
|
||||
Loading…
Reference in new issue