ci: implement Android build and test stage
- Add .gitea/workflows/ci.yml: lint -> test -> build-android -> build-ios pipeline - Flutter 3.41.x aligned with devcontainer (was 3.27.x) - Java 17 (temurin) with Gradle build cache - flutter precache --android + SDK license acceptance (CI crash fixes) - Conditional release signing via ANDROID_KEYSTORE_* secrets - Pre-build gates (analyze + test) skip expensive build on failure - Conditional whitelabel build script (only when theme.json exists) - APK + AAB artifact upload (90-day retention) - Add .gitea/workflows/release.yml: tag-triggered release pipeline - Lint -> test -> build-android -> build-ios -> publish-release - Gitea Release creation with APK attachment - Fixed Gitea API auth (was leaking placeholder '***' token) - Apple signing support via APPLE_CERTIFICATE_* secrets - Update android/app/build.gradle.kts: conditional release signing - signingConfigs.release block loads from key.properties when present - Falls back to debug signing when key.properties absent - Backward compatible with local dev (no secrets required)
This commit is contained in:
robot
@@ -0,0 +1,210 @@
|
||||
# kryz-go-flutter CI Pipeline
|
||||
# Triggers on push and pull_request
|
||||
# Stages: lint -> test -> build (Android + iOS) -> artifacts
|
||||
|
||||
name: CI
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main, develop]
|
||||
pull_request:
|
||||
branches: [main]
|
||||
|
||||
# Cancel in-progress runs on new push to same branch
|
||||
concurrency:
|
||||
group: ${{ github.workflow }}-${{ github.ref }}
|
||||
cancel-in-progress: true
|
||||
|
||||
env:
|
||||
FLUTTER_VERSION: "3.41.x"
|
||||
|
||||
jobs:
|
||||
# ── Stage 1: Lint & static analysis ──────────────────────────────
|
||||
lint:
|
||||
name: Lint
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Flutter
|
||||
uses: subosito/flutter-action@v2
|
||||
with:
|
||||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||||
cache: true
|
||||
|
||||
- name: Install dependencies
|
||||
run: flutter pub get
|
||||
|
||||
- name: Analyze Dart code
|
||||
run: flutter analyze --fatal-infos
|
||||
|
||||
- name: Check formatting
|
||||
run: dart format --set-exit-if-changed lib/ test/
|
||||
|
||||
|
||||
# ── Stage 2: Unit & widget tests ─────────────────────────────────
|
||||
test:
|
||||
name: Test
|
||||
runs-on: ubuntu-latest
|
||||
needs: [lint]
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Flutter
|
||||
uses: subosito/flutter-action@v2
|
||||
with:
|
||||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||||
cache: true
|
||||
|
||||
- name: Install dependencies
|
||||
run: flutter pub get
|
||||
|
||||
- name: Run tests
|
||||
run: flutter test --reporter=expanded
|
||||
|
||||
- name: Run tests with coverage
|
||||
if: github.ref == 'refs/heads/main' && github.event_name == 'push'
|
||||
run: flutter test --coverage
|
||||
|
||||
- name: Upload coverage report
|
||||
if: github.ref == 'refs/heads/main' && github.event_name == 'push'
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: coverage-report
|
||||
path: coverage/lcov.info
|
||||
retention-days: 14
|
||||
|
||||
|
||||
# ── Stage 3: Android build ──────────────────────────────────────
|
||||
build-android:
|
||||
name: Build Android
|
||||
runs-on: ubuntu-latest
|
||||
needs: [test]
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Java 17
|
||||
uses: actions/setup-java@v4
|
||||
with:
|
||||
distribution: temurin
|
||||
java-version: "17"
|
||||
cache: gradle
|
||||
|
||||
- name: Setup Flutter
|
||||
uses: subosito/flutter-action@v2
|
||||
with:
|
||||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||||
cache: true
|
||||
|
||||
- name: Pre-cache Android platform artifacts
|
||||
run: flutter precache --android
|
||||
|
||||
- name: Accept Android SDK licenses
|
||||
run: |
|
||||
yes | sdkmanager --licenses || true
|
||||
|
||||
- name: Setup Python (for whitelabel build script)
|
||||
uses: actions/setup-python@v5
|
||||
with:
|
||||
python-version: "3.12"
|
||||
|
||||
- name: Install Python dependencies
|
||||
run: |
|
||||
python -m pip install --upgrade pip
|
||||
pip install -r requirements.txt
|
||||
|
||||
- name: Install Flutter dependencies
|
||||
run: flutter pub get
|
||||
|
||||
- name: Analyze (gate before build)
|
||||
run: flutter analyze --fatal-warnings
|
||||
|
||||
- name: Run tests (gate before build)
|
||||
run: flutter test --reporter=expanded
|
||||
|
||||
# Optional: run whitelabel build script to regenerate lib/generated/
|
||||
# Skip gracefully if theme.json is missing or script fails
|
||||
- name: Run whitelabel build script
|
||||
if: hashFiles('theme.json') != ''
|
||||
run: python3 build_whitelabel.py
|
||||
|
||||
- name: Configure release signing
|
||||
if: env.ANDROID_KEYSTORE_BASE64 != ''
|
||||
env:
|
||||
ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
|
||||
ANDROID_KEYSTORE_PASS: ${{ secrets.ANDROID_KEYSTORE_PASS }}
|
||||
ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
|
||||
ANDROID_KEY_PASS: ${{ secrets.ANDROID_KEY_PASS }}
|
||||
run: |
|
||||
# Decode keystore
|
||||
echo "$ANDROID_KEYSTORE_BASE64" | base64 -d > android/app/release.keystore
|
||||
|
||||
# Write key.properties for Gradle to consume
|
||||
cat > android/key.properties <<EOF
|
||||
storePassword=$ANDROID_KEYSTORE_PASS
|
||||
keyPassword=$ANDROID_KEY_PASS
|
||||
keyAlias=$ANDROID_KEY_ALIAS
|
||||
storeFile=../release.keystore
|
||||
EOF
|
||||
|
||||
- name: Build APK (release)
|
||||
run: flutter build apk --release
|
||||
|
||||
- name: Build App Bundle (release)
|
||||
run: flutter build appbundle --release
|
||||
|
||||
- name: List build outputs
|
||||
run: |
|
||||
echo "=== APK output ==="
|
||||
ls -lh build/app/outputs/flutter-apk/ || true
|
||||
echo "=== AAB output ==="
|
||||
ls -lh build/app/outputs/bundle/release/ || true
|
||||
|
||||
- name: Upload APK artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: android-apk
|
||||
path: build/app/outputs/flutter-apk/app-release.apk
|
||||
retention-days: 90
|
||||
|
||||
- name: Upload AAB artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: android-aab
|
||||
path: build/app/outputs/bundle/release/app-release.aab
|
||||
retention-days: 90
|
||||
|
||||
|
||||
# ── Stage 3 (parallel): iOS build ───────────────────────────────
|
||||
build-ios:
|
||||
name: Build iOS
|
||||
runs-on: macos-latest
|
||||
needs: [test]
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Flutter
|
||||
uses: subosito/flutter-action@v2
|
||||
with:
|
||||
flutter-version: ${{ env.FLUTTER_VERSION }}
|
||||
cache: true
|
||||
|
||||
- name: Install dependencies
|
||||
run: flutter pub get
|
||||
|
||||
- name: Install CocoaPods dependencies
|
||||
run: cd ios && pod install --repo-update
|
||||
|
||||
- name: Build iOS (release, no-codesign)
|
||||
run: flutter build ios --release --no-codesign
|
||||
|
||||
- name: Upload iOS build artifact
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: ios-app
|
||||
path: build/ios/iphoneos/
|
||||
retention-days: 90
|
||||
Reference in New Issue
Block a user