Remove Google Play upload (needs SERVICE_ACCOUNT_JSON we don't have) and AAB signing. Use built-in GITHUB_TOKEN instead of RELEASE_TOKEN secret. Pin actions to stable versions (checkout@v4, setup-java@v4, setup-gradle@v4). Builds assembleRelease, signs APK via apksigner with KEY_STORE secrets, creates GitHub release with APK. Triggered by v** tags.
50 lines
1.3 KiB
YAML
50 lines
1.3 KiB
YAML
name: release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- v**
|
|
|
|
env:
|
|
TAG_NAME: ${{ github.ref_name }}
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Checkout Repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Java
|
|
uses: actions/setup-java@v4
|
|
with:
|
|
distribution: 'temurin'
|
|
java-version: '21'
|
|
|
|
- name: Setup Gradle
|
|
uses: gradle/actions/setup-gradle@v4
|
|
|
|
- name: Assemble APK
|
|
run: ./gradlew assembleRelease
|
|
|
|
- name: Sign APK
|
|
run: |
|
|
echo "${{ secrets.KEY_STORE }}" | base64 -d > keystore.jks
|
|
APK=$(find app/build/outputs/apk/release -name "*.apk" | head -1)
|
|
BUILD_TOOLS=$(ls -d ${ANDROID_HOME}/build-tools/*/ | sort -V | tail -1)
|
|
${BUILD_TOOLS}apksigner sign \
|
|
--ks keystore.jks \
|
|
--ks-pass pass:${{ secrets.KEY_STORE_PASSWORD }} \
|
|
--ks-key-alias ${{ secrets.KEY_ALIAS }} \
|
|
--key-pass pass:${{ secrets.KEY_PASSWORD }} \
|
|
--out app/build/outputs/apk/release/look4sat.apk \
|
|
"$APK"
|
|
rm keystore.jks
|
|
|
|
- name: Create Release
|
|
run: |
|
|
gh release create $TAG_NAME --title=$TAG_NAME --generate-notes
|
|
gh release upload $TAG_NAME app/build/outputs/apk/release/look4sat.apk
|