Signal-Android/.github/workflows/android.yml at main · SamSprung/Signal-Android · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
name: Android CI

on:
  push:
    branches:
    - 'main'

permissions:
  contents: write

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
      # gh api repos/actions/checkout/commits/v6 --jq '.sha'
      with:
          submodules: true
          lfs: true

    - name: Retrieve commit identification
      run: |
         GIT_BRANCH=$(git name-rev --name-only HEAD)
         echo "GIT_BRANCH=${GIT_BRANCH}" >> $GITHUB_ENV
         GIT_HASH=$(git rev-parse --short HEAD)
         echo "GIT_HASH=${GIT_HASH}" >> $GITHUB_ENV

    - name: set up JDK 21
      uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5
      # gh api repos/actions/setup-java/commits/v5 --jq '.sha'
      with:
        distribution: temurin
        java-version: 21

    - name: Setup Android SDK
      uses: android-actions/setup-android@v3

    - name: Validate Gradle Wrapper
      uses: gradle/actions/wrapper-validation@3f131e8634966bd73d06cc69884922b02e6faf92 # v6
      # gh api repos/gradle/actions/commits/v6 --jq '.sha'

    - name: Set up Gradle
      uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
      # gh api repos/gradle/actions/commits/v6 --jq '.sha'
      with:
        cache-provider: basic

    - name: Decode Keystore File
      env:
        KEYSTORE: ${{ secrets.KEYSTORE }}
      run: printf '%s' "$KEYSTORE" | base64 -d > "$GITHUB_WORKSPACE/key.keystore"

    - name: Build with Gradle
      timeout-minutes: 90
      env:
        KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
        KEY_ALIAS: ${{ secrets.KEYALIAS }}
        KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
      run: |
        set -euo pipefail

        gradle_args=(
          --build-cache
          --console=plain
          --parallel
          --max-workers=2
          --stacktrace
          assembleBitProdRelease
          "-Dorg.gradle.jvmargs=-Xmx6g -Xms256m -XX:MaxMetaspaceSize=768m -Dcom.android.tools.r8.threadCount=1 -XX:+UnlockExperimentalVMOptions -XX:hashCode=3"
          "-Dkotlin.daemon.jvmargs=-Xmx2g -XX:MaxMetaspaceSize=512m"
          "-Pandroid.injected.signing.store.file=${GITHUB_WORKSPACE}/key.keystore"
          "-Pandroid.injected.signing.store.password=${KEYSTORE_PASSWORD}"
          "-Pandroid.injected.signing.key.alias=${KEY_ALIAS}"
          "-Pandroid.injected.signing.key.password=${KEY_PASSWORD}"
        )

        ./gradlew "${gradle_args[@]}" &
        gradle_pid=$!

        trap 'kill -TERM "$gradle_pid" 2>/dev/null || true; wait "$gradle_pid" 2>/dev/null || true' INT TERM

        while kill -0 "$gradle_pid" 2>/dev/null; do
          sleep 60
          if kill -0 "$gradle_pid" 2>/dev/null; then
            echo "::notice::Gradle build still running..."
          fi
        done

        wait "$gradle_pid"

    - uses: r0adkll/sign-android-release@v1
      name: Sign app APK
      # ID used to access action output
      id: sign_app
      with:
        releaseDirectory: app/build/outputs/apk/bitProd/release
        signingKeyBase64: ${{ secrets.KEYSTORE }}
        alias: ${{ secrets.KEYALIAS }}
        keyStorePassword: ${{ secrets.KEYSTORE_PASSWORD }}
        keyPassword: ${{ secrets.KEY_PASSWORD }}
      env:
        # override default build-tools version (29.0.3) -- optional
        BUILD_TOOLS_VERSION: "34.0.0"

    - uses: actions/upload-artifact@v4
      with:
        name: Signal-Android-${{ env.GIT_HASH }}
        retention-days: 1
        path: ${{steps.sign_app.outputs.signedReleaseFile}}

    - uses: SamSprung/action-github-releases@v1.0.0
      with:
        repo_token: "${{ secrets.GITHUB_TOKEN }}"
        automatic_release_tag: "8bit/${{ env.GIT_BRANCH }}"
        prerelease: ${{ env.GIT_BRANCH != 'main' }}
        title: Signal-Android-${{ env.GIT_HASH }}
        files: ${{steps.sign_app.outputs.signedReleaseFile}}