dist.sh builds versioned, signed artifacts for both apps from a git tag

(semver drives Android versionCode/versionName and package.json). The build-image/ Dockerfile pins the same toolchain for a portable, containerized Gitea Actions runner (build-image.sh builds and pushes it) so releases don't depend on any one machine's local setup. Pushing vX.Y.Z now builds and publishes a Gitea Release automatically.
2026-07-02 13:07:52 +02:00
parent 73c6c90c8d
commit 4be350d758
9 changed files with 465 additions and 22 deletions
@@ -0,0 +1,56 @@
+name: release
+
+# Push a tag matching vX.Y.Z (e.g. v1.2.3) to build and publish a release.
+# The tag drives the version — nothing to bump in source files beforehand.
+on:
+  push:
+    tags:
+      - "v[0-9]+.[0-9]+.[0-9]+"
+
+jobs:
+  build:
+    # Needed to create the release and upload assets with GITEA_TOKEN below,
+    # regardless of this instance's default Actions permission mode.
+    permissions:
+      contents: write
+    # Must match the label your self-hosted act_runner registers with.
+    runs-on: self-hosted
+    container:
+      # :latest — always the most recently pushed build-image.sh output.
+      # Pin to a specific tag here (see build-image/VERSION) if you need a
+      # release build to be reproducible against an exact toolchain image.
+      image: cr.ladkau.de/schwert-und-magie/builder:latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Write release signing credentials
+        run: |
+          set -euo pipefail
+          echo "${{ secrets.RELEASE_KEYSTORE_B64 }}" | base64 -d \
+            > SchwertUndMagieOnPebbleCompanionApp/release.keystore
+          printf '%s\n' "${{ secrets.RELEASE_KEYSTORE_PROPERTIES }}" \
+            > SchwertUndMagieOnPebbleCompanionApp/keystore.properties
+
+      - name: Build artifacts
+        run: |
+          set -euo pipefail
+          VERSION="${{ gitea.ref_name }}"
+          VERSION="${VERSION#v}"
+          VERSION="$VERSION" ./dist.sh
+
+      - name: Create release and upload artifacts
+        run: |
+          set -euo pipefail
+          API="${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}"
+          AUTH="Authorization: token ${{ secrets.GITEA_TOKEN }}"
+
+          RELEASE_ID="$(curl -sf -X POST "$API/releases" \
+            -H "$AUTH" -H "Content-Type: application/json" \
+            -d "{\"tag_name\": \"${{ gitea.ref_name }}\", \"name\": \"${{ gitea.ref_name }}\"}" \
+            | jq -r .id)"
+
+          for f in dist/*; do
+            curl -sf -X POST "$API/releases/$RELEASE_ID/assets?name=$(basename "$f")" \
+              -H "$AUTH" -F "attachment=@$f"
+          done