moadong-react-native/.github/workflows/android-release.yml at main · Moadong/moadong-react-native · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
name: Android Release

on:
  push:
    branches:
      - prod
  workflow_dispatch:
    inputs:
      lane:
        description: Fastlane Android lane to run
        required: true
        type: choice
        default: internal
        options:
          - internal
          - production_draft

jobs:
  android-release:
    runs-on: ubuntu-latest

    env:
      ANDROID_PACKAGE_NAME: com.moadong.moadong
      EXPO_PUBLIC_BASE_URL: ${{ secrets.EXPO_PUBLIC_BASE_URL || vars.EXPO_PUBLIC_BASE_URL }}
      EXPO_PUBLIC_WEBVIEW_URL: ${{ secrets.EXPO_PUBLIC_WEBVIEW_URL || vars.EXPO_PUBLIC_WEBVIEW_URL }}
      EXPO_PUBLIC_MIXPANEL_TOKEN: ${{ secrets.EXPO_PUBLIC_MIXPANEL_TOKEN || vars.EXPO_PUBLIC_MIXPANEL_TOKEN }}
      SUPPLY_JSON_KEY: ${{ github.workspace }}/google-play-service-account.json
      MYAPP_UPLOAD_STORE_FILE: ${{ secrets.MYAPP_UPLOAD_STORE_FILE || 'moadong-upload.keystore' }}
      MYAPP_UPLOAD_STORE_PASSWORD: ${{ secrets.MYAPP_UPLOAD_STORE_PASSWORD }}
      MYAPP_UPLOAD_KEY_ALIAS: ${{ secrets.MYAPP_UPLOAD_KEY_ALIAS }}
      MYAPP_UPLOAD_KEY_PASSWORD: ${{ secrets.MYAPP_UPLOAD_KEY_PASSWORD }}
      FASTLANE_ANDROID_LANE: ${{ github.event_name == 'push' && 'production_draft' || github.event.inputs.lane || 'internal' }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: npm

      - name: Setup Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: "3.1"
          bundler-cache: true

      - name: Install Node dependencies
        run: npm ci

      - name: Validate Android release secrets
        run: |
          test -n "$ANDROID_KEYSTORE_BASE64"
          test -n "$MYAPP_UPLOAD_STORE_FILE"
          test -n "$MYAPP_UPLOAD_STORE_PASSWORD"
          test -n "$MYAPP_UPLOAD_KEY_ALIAS"
          test -n "$MYAPP_UPLOAD_KEY_PASSWORD"
          test -n "$GOOGLE_SERVICES_JSON_BASE64"
          test -n "$GOOGLE_PLAY_SERVICE_ACCOUNT_JSON"
          test -n "$EXPO_PUBLIC_BASE_URL"
          test -n "$EXPO_PUBLIC_WEBVIEW_URL"
          test -n "$EXPO_PUBLIC_MIXPANEL_TOKEN"
        env:
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          GOOGLE_SERVICES_JSON_BASE64: ${{ secrets.GOOGLE_SERVICES_JSON_BASE64 }}
          GOOGLE_PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}

      - name: Create public env file
        run: |
          {
            echo "EXPO_PUBLIC_BASE_URL=${EXPO_PUBLIC_BASE_URL}"
            echo "EXPO_PUBLIC_WEBVIEW_URL=${EXPO_PUBLIC_WEBVIEW_URL}"
            echo "EXPO_PUBLIC_MIXPANEL_TOKEN=${EXPO_PUBLIC_MIXPANEL_TOKEN}"
          } > .env

      - name: Restore Android secret files
        run: |
          printf '%s' "$GOOGLE_SERVICES_JSON_BASE64" | base64 --decode > google-services.json
          printf '%s' "$GOOGLE_PLAY_SERVICE_ACCOUNT_JSON" | base64 --decode > "$SUPPLY_JSON_KEY"
          printf '%s' "$ANDROID_KEYSTORE_BASE64" | base64 --decode > "$MYAPP_UPLOAD_STORE_FILE"
        env:
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          GOOGLE_SERVICES_JSON_BASE64: ${{ secrets.GOOGLE_SERVICES_JSON_BASE64 }}
          GOOGLE_PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}

      - name: Upload Android release
        env:
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
          GOOGLE_SERVICES_JSON_BASE64: ${{ secrets.GOOGLE_SERVICES_JSON_BASE64 }}
          GOOGLE_PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}
        run: bundle exec fastlane android "$FASTLANE_ANDROID_LANE"