Release candidate build #658
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "Release candidate build" | |
| on: | |
| push: | |
| branches: | |
| - release/candidate | |
| merge_group: | |
| types: [ checks_requested ] | |
| branches: [ release/candidate ] | |
| pull_request: | |
| branches: | |
| - release/candidate | |
| types: [ opened, synchronize ] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.event.merge_group.head_sha }} | |
| cancel-in-progress: true | |
| jobs: | |
| code-analysis: | |
| uses: ./.github/workflows/code-analysis.yml | |
| ui-tests: | |
| uses: ./.github/workflows/gradle-run-ui-tests.yml | |
| unit-tests: | |
| uses: ./.github/workflows/gradle-run-unit-tests.yml | |
| secrets: inherit | |
| build-app: | |
| needs: [ code-analysis, ui-tests, unit-tests ] | |
| runs-on: ubuntu-latest | |
| if: github.event_name == 'merge_group' || (github.event.pull_request.head.repo.full_name == github.repository && github.event_name == 'pull_request') | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive # Needed in order to fetch Kalium sources for building | |
| fetch-depth: 0 | |
| - name: Set up JDK 17 | |
| uses: buildjet/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| cache: gradle | |
| - name: Decode Keystore | |
| env: | |
| ENCODED_STRING: ${{ secrets.ENCODED_KEYSTORE_INTERNAL_RELEASE }} | |
| run: | | |
| TMP_KEYSTORE_FILE_PATH="${RUNNER_TEMP}"/keystore | |
| mkdir "${TMP_KEYSTORE_FILE_PATH}" | |
| echo $ENCODED_STRING | base64 -di > "${TMP_KEYSTORE_FILE_PATH}"/the.keystore | |
| - name: Make gradlew executable | |
| run: chmod +x ./gradlew | |
| - name: Build Staging flavour | |
| run: | |
| ./gradlew app:assembleStagingCompat | |
| env: | |
| DATADOG_APP_ID: ${{ secrets.DATADOG_APP_ID }} | |
| DATADOG_CLIENT_TOKEN: ${{ secrets.DATADOG_CLIENT_TOKEN }} | |
| KEYSTORE_FILE_PATH_DEBUG: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_FILE_PATH_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_FILE_PATH_COMPAT: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_FILE_PATH_COMPAT_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_KEY_NAME_COMPAT: ${{ secrets.SIGNING_KEY_ALIAS_INTERNAL_RELEASE }} | |
| KEYPWD_COMPAT: ${{ secrets.SIGNING_KEY_PASSWORD_INTERNAL_RELEASE }} | |
| KEYSTOREPWD_COMPAT: ${{ secrets.SIGNING_STORE_PASSWORD_INTERNAL_RELEASE }} | |
| ENABLE_SIGNING: ${{ secrets.ENABLE_SIGNING }} | |
| - name: Upload | |
| if: success() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: Build Artifacts | |
| path: app/build/outputs/ | |
| - name: Deploy StagingCompat to S3 | |
| uses: ./.github/actions/deploy-to-s3 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-bucket: ${{ secrets.AWS_S3_BUCKET }} | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| build-flavour: staging | |
| build-variant: compat | |
| build-app-internal: | |
| needs: [ code-analysis, ui-tests, unit-tests ] | |
| runs-on: ubuntu-latest | |
| if: github.event_name == 'push' && github.ref_name == 'release/candidate' | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive # Needed in order to fetch Kalium sources for building | |
| fetch-depth: 0 | |
| - name: Set up JDK 17 | |
| uses: buildjet/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'temurin' | |
| cache: gradle | |
| - name: Decode Keystore | |
| env: | |
| ENCODED_STRING: ${{ secrets.ENCODED_KEYSTORE_INTERNAL_RELEASE }} | |
| run: | | |
| TMP_KEYSTORE_FILE_PATH="${RUNNER_TEMP}"/keystore | |
| mkdir "${TMP_KEYSTORE_FILE_PATH}" | |
| echo $ENCODED_STRING | base64 -di > "${TMP_KEYSTORE_FILE_PATH}"/the.keystore | |
| - name: Make gradlew executable | |
| run: chmod +x ./gradlew | |
| - name: Build internal flavour APK | |
| run: | |
| ./gradlew app:assembleInternalCompat | |
| env: | |
| DATADOG_APP_ID: ${{ secrets.DATADOG_APP_ID }} | |
| DATADOG_CLIENT_TOKEN: ${{ secrets.DATADOG_CLIENT_TOKEN }} | |
| KEYSTORE_FILE_PATH_DEBUG: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_FILE_PATH_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_FILE_PATH_COMPAT: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_FILE_PATH_COMPAT_RELEASE: ${{ vars.KEYSTORE_FILE_PATH }} | |
| KEYSTORE_KEY_NAME_COMPAT: ${{ secrets.SIGNING_KEY_ALIAS_INTERNAL_RELEASE }} | |
| KEYPWD_COMPAT: ${{ secrets.SIGNING_KEY_PASSWORD_INTERNAL_RELEASE }} | |
| KEYSTOREPWD_COMPAT: ${{ secrets.SIGNING_STORE_PASSWORD_INTERNAL_RELEASE }} | |
| ENABLE_SIGNING: ${{ secrets.ENABLE_SIGNING }} | |
| - name: Upload | |
| if: success() | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: Build Artifacts | |
| path: app/build/outputs/ | |
| - name: Deploy InternalCompat to S3 | |
| uses: ./.github/actions/deploy-to-s3 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-bucket: ${{ secrets.AWS_S3_BUCKET }} | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| build-flavour: internal | |
| build-variant: compat |