mirror of
https://github.com/pezkuwichain/pezkuwi-wallet-android.git
synced 2026-04-22 21:57:56 +00:00
a294aa1a6b
Security hardened release: - Code obfuscation enabled (minifyEnabled=true, shrinkResources=true) - Sensitive files excluded (google-services.json, keystores) - Branch.io key moved to BuildConfig placeholder - Updated dependencies: OkHttp 4.12.0, Gson 2.10.1, BouncyCastle 1.77 - Comprehensive ProGuard rules for crypto wallet - Navigation 2.7.7, Lifecycle 2.7.0, ConstraintLayout 2.1.4
89 lines
2.2 KiB
YAML
89 lines
2.2 KiB
YAML
name: Publish GitHub release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- '*'
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: write
|
|
|
|
jobs:
|
|
build:
|
|
uses: pezkuwichain/pezkuwi-wallet-android/.github/workflows/android_build.yml@main
|
|
with:
|
|
branch: master
|
|
gradlew-command: assembleReleaseGithub
|
|
keystore-file-name: github_key.jks
|
|
secrets: inherit
|
|
|
|
create-release:
|
|
runs-on: ubuntu-latest
|
|
needs: build
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Download built artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: apk
|
|
path: app
|
|
|
|
- name: Rename artifacts
|
|
run: mv app/releaseGithub/app-releaseGithub.apk app/releaseGithub/pezkuwi-wallet-android-${{ github.ref_name }}-github.apk
|
|
|
|
- name: Create Release
|
|
id: create_release
|
|
uses: softprops/action-gh-release@v1
|
|
with:
|
|
name: Release ${{ github.ref_name }}
|
|
tag_name: ${{ github.ref_name }}
|
|
generate_release_notes: true
|
|
draft: true
|
|
files: app/releaseGithub/pezkuwi-wallet-android-${{ github.ref_name }}-github.apk
|
|
|
|
deploy-to-vps:
|
|
runs-on: ubuntu-latest
|
|
needs: build
|
|
|
|
steps:
|
|
- name: Download built artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: apk
|
|
path: deploy
|
|
|
|
- name: Prepare APK for VPS
|
|
run: |
|
|
mkdir -p ./vps-deploy
|
|
mv deploy/releaseGithub/app-releaseGithub.apk ./vps-deploy/pezkuwi-wallet.apk
|
|
|
|
- name: Create version.json
|
|
run: |
|
|
TAG="${{ github.ref_name }}"
|
|
VERSION="${TAG#v}"
|
|
cat > ./vps-deploy/version.json << EOF
|
|
{
|
|
"version": "$VERSION",
|
|
"tag": "$TAG",
|
|
"apk": "pezkuwi-wallet.apk",
|
|
"updated_at": "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
|
|
}
|
|
EOF
|
|
|
|
- name: Deploy to VPS
|
|
uses: appleboy/scp-action@v1.0.0
|
|
with:
|
|
host: ${{ secrets.VPS_HOST }}
|
|
username: ${{ secrets.VPS_USER }}
|
|
key: ${{ secrets.VPS_SSH_KEY }}
|
|
source: 'vps-deploy/*'
|
|
target: '/var/www/wallet.pezkuwichain.io'
|
|
strip_components: 1
|
|
overwrite: true
|