dca958cc9e
Summary: This diff bumps `actions/checkout@v3.5.3`, `actions/setup-java@v3.11.0` & `actions/cache@v3.3.1` ### Ref.: - `actions/checkout@v3.5.3` changelog: https://github.com/actions/checkout/releases/tag/v3.5.3 - `actions/setup-java@v3.11.0` changelog: https://github.com/actions/setup-java/releases/tag/v3.11.0 - `actions/cache@v3.3.1` changelog: https://github.com/actions/cache/releases/tag/v3.3.1 ## Changelog: [GENERAL] [SECURITY] - [Actions] `publish-android` - Bump `actions/`- `checkout@v3.5.3`, `setup-java@v3.11.0` & `cache@v3.3.1` Pull Request resolved: https://github.com/facebook/flipper/pull/4866 Test Plan: - Workflow should run and work as usual. Reviewed By: aigoncharov Differential Revision: D47755940 Pulled By: passy fbshipit-source-id: 8cbd7c360b48a5948125ef01bf3ca08aca37f745
63 lines
2.3 KiB
YAML
63 lines
2.3 KiB
YAML
name: Publish Android
|
|
# This action runs on 'git push tag v*' and worflow dispatch as specified below
|
|
on:
|
|
push:
|
|
tags:
|
|
- v*
|
|
workflow_dispatch:
|
|
inputs:
|
|
tag:
|
|
description: "Tag to upload artifacts to"
|
|
required: false
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v3.5.3
|
|
- name: set up JDK
|
|
uses: actions/setup-java@v3.11.0
|
|
with:
|
|
distribution: 'temurin'
|
|
java-version: 17
|
|
- name: Write GPG Sec Ring
|
|
run: echo '${{ secrets.GPG_KEY_CONTENTS }}' | base64 -d > /tmp/secring.gpg
|
|
- name: Update gradle.properties
|
|
run: echo -e "signing.secretKeyRingFile=/tmp/secring.gpg\nsigning.keyId=${{ secrets.SIGNING_KEY_ID }}\nsigning.password=${{ secrets.SIGNING_PASSWORD }}\nmavenCentralPassword=${{ secrets.SONATYPE_NEXUS_PASSWORD }}\nmavenCentralUsername=${{ secrets.SONATYPE_NEXUS_USERNAME }}\nSONATYPE_HOST=DEFAULT\nRELEASE_SIGNING_ENABLED=true\nSONATYPE_AUTOMATIC_RELEASE=true" >> gradle.properties
|
|
- name: Compute build cache
|
|
run: ./scripts/checksum-android.sh checksum-android.txt
|
|
- uses: actions/cache@v3.3.1
|
|
with:
|
|
path: |
|
|
~/.gradle/caches/modules-*
|
|
~/.gradle/caches/jars-*
|
|
~/.gradle/caches/build-cache-*
|
|
key: gradle-${{ hashFiles('checksum-android.txt') }}
|
|
- name: Build artifacts
|
|
run: ./gradlew :sample:assembleDebug :sample:assembleRelease && ./gradlew :android:assembleRelease
|
|
- name: Upload Archives
|
|
run: ./gradlew publish -info
|
|
- name: Clean secrets
|
|
if: always()
|
|
run: rm /tmp/secring.gpg
|
|
- name: Rename apk
|
|
run: mv android/sample/build/outputs/apk/debug/sample-debug.apk SampleApp-android.apk
|
|
- name: Attach sample APK to release
|
|
if: ${{ github.event.inputs.tag != '' }}
|
|
uses: aigoncharov/github-upload-release-artifacts-action@2.2.3
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
with:
|
|
created_tag: ${{ github.event.inputs.tag }}
|
|
args: 'SampleApp-android.apk'
|
|
- name: Open issue on failure
|
|
if: failure()
|
|
uses: JasonEtco/create-an-issue@v2.4.0
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
REPOSITORY: ${{ github.repository }}
|
|
RUN_ID: ${{ github.run_id }}
|
|
WORKFLOW_NAME: "Publish Android"
|
|
with:
|
|
filename: .github/action-failure-template.md
|