1e07e36d5c
Reproduced locally against the v0.4.2 APK: androguard 4.0.x fails resource
parsing ('res1 must be zero!'), 4.1.0/4.1.1 fail signature parsing
('NoOverwriteDict' object has no attribute 'append'), and 4.1.4 parses both
cleanly. fdroidserver 2.4.4's own resolver pulls a buggy 4.1.x, so pin 4.1.4.
124 lines
4.5 KiB
YAML
124 lines
4.5 KiB
YAML
name: Publish F-Droid Repo
|
|
|
|
on:
|
|
push:
|
|
tags: ["v*"]
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
publish-fdroid:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
env:
|
|
EXPO_PUBLIC_SENTRY_DSN: ${{ secrets.EXPO_PUBLIC_SENTRY_DSN }}
|
|
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
|
|
SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
|
|
SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- uses: actions/setup-node@v6
|
|
with:
|
|
node-version: 20
|
|
cache: npm
|
|
|
|
- uses: actions/setup-java@v5
|
|
with:
|
|
distribution: temurin
|
|
java-version: 17
|
|
|
|
- name: Setup Android SDK
|
|
uses: android-actions/setup-android@v4
|
|
|
|
- name: Cache Gradle
|
|
uses: actions/cache@v5
|
|
with:
|
|
path: |
|
|
~/.gradle/caches
|
|
~/.gradle/wrapper
|
|
android/.gradle
|
|
key: ${{ runner.os }}-gradle-${{ hashFiles('android/**/*.gradle*', 'android/gradle/wrapper/gradle-wrapper.properties') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-gradle-
|
|
|
|
- name: Install dependencies
|
|
run: npm install --legacy-peer-deps
|
|
|
|
- name: Expo prebuild
|
|
run: npx expo prebuild --platform android --no-install
|
|
|
|
- name: Setup signing
|
|
run: |
|
|
if [[ -n "${{ secrets.KEYSTORE_BASE64 }}" ]]; then
|
|
echo "${{ secrets.KEYSTORE_BASE64 }}" | base64 -d > android/app/release.keystore
|
|
echo "RELEASE_STORE_FILE=release.keystore" >> "$GITHUB_ENV"
|
|
echo "RELEASE_STORE_PASSWORD=${{ secrets.KEYSTORE_PASSWORD }}" >> "$GITHUB_ENV"
|
|
echo "RELEASE_KEY_ALIAS=${{ secrets.KEY_ALIAS }}" >> "$GITHUB_ENV"
|
|
echo "RELEASE_KEY_PASSWORD=${{ secrets.KEY_PASSWORD }}" >> "$GITHUB_ENV"
|
|
echo "Signing: production keystore"
|
|
else
|
|
keytool -genkey -v -keystore android/app/debug.keystore -storepass android \
|
|
-alias androiddebugkey -keypass android -keyalg RSA -keysize 2048 -validity 10000 \
|
|
-dname "CN=Android Debug,O=Android,C=US"
|
|
echo "Signing: debug keystore"
|
|
fi
|
|
|
|
- name: Build APK
|
|
working-directory: android
|
|
run: ./gradlew assembleRelease
|
|
|
|
- name: Install fdroidserver
|
|
# androguard version matters: 4.0.x crashes parsing our APK resources
|
|
# ("res1 must be zero!"); 4.1.0/4.1.1 crash on the signature block
|
|
# ("'NoOverwriteDict' object has no attribute 'append'"). androguard 4.1.4
|
|
# fixes both — verified locally against the v0.4.2 APK. fdroidserver's own
|
|
# resolver picks a buggy 4.1.x, so pin androguard explicitly.
|
|
run: pip install "fdroidserver==2.4.4" "androguard==4.1.4"
|
|
|
|
- name: Setup F-Droid repo
|
|
id: fdroid-setup
|
|
run: |
|
|
FDROID_DIR="$HOME/fdroid-repo"
|
|
mkdir -p "$FDROID_DIR/repo"
|
|
mkdir -p "$FDROID_DIR/metadata"
|
|
|
|
echo "${{ secrets.FDROID_REPO_KEYSTORE_B64 }}" | base64 -d > "$FDROID_DIR/repo-keystore.jks"
|
|
|
|
cat > "$FDROID_DIR/config.yml" << CONFIGEOF
|
|
repo_url: https://dzianisv.github.io/opencode-mobile/fdroid/repo
|
|
repo_name: OpenCode Mobile
|
|
repo_description: OpenCode Mobile - AI coding assistant companion app
|
|
keystore: $FDROID_DIR/repo-keystore.jks
|
|
repo_keyalias: ${{ secrets.FDROID_REPO_KEY_ALIAS }}
|
|
keystorepass: ${{ secrets.FDROID_REPO_KEYSTORE_PASS }}
|
|
keypass: ${{ secrets.FDROID_REPO_KEY_PASS }}
|
|
CONFIGEOF
|
|
|
|
cp android/app/build/outputs/apk/release/app-release.apk "$FDROID_DIR/repo/"
|
|
|
|
echo "fdroid-dir=$FDROID_DIR" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Generate F-Droid repo index
|
|
run: |
|
|
cd "${{ steps.fdroid-setup.outputs.fdroid-dir }}"
|
|
fdroid update --create-metadata
|
|
|
|
- name: Verify F-Droid repo index was generated
|
|
run: |
|
|
IDX="${{ steps.fdroid-setup.outputs.fdroid-dir }}/repo/index.xml"
|
|
if [[ ! -f "$IDX" ]]; then
|
|
echo "ERROR: F-Droid repo index not generated at $IDX"
|
|
ls -la "${{ steps.fdroid-setup.outputs.fdroid-dir }}/repo/" || true
|
|
exit 1
|
|
fi
|
|
echo "F-Droid repo index verified: $(wc -c < "$IDX") bytes"
|
|
|
|
- name: Deploy to GitHub Pages
|
|
uses: peaceiris/actions-gh-pages@v4
|
|
with:
|
|
github_token: ${{ secrets.GITHUB_TOKEN }}
|
|
publish_dir: ${{ steps.fdroid-setup.outputs.fdroid-dir }}/repo
|
|
destination_dir: fdroid/repo
|
|
keep_files: true
|