Release - Production Release to Play Store and Github #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release - Production Release to Play Store and Github | |
| on: | |
| workflow_dispatch: | |
| env: | |
| ASANA_PAT: ${{ secrets.GH_ASANA_SECRET }} | |
| GH_TOKEN: ${{ secrets.GT_DAXMOBILE }} | |
| GOOGLE_APPLICATION_CREDENTIALS: '#{ENV["HOME"]}/jenkins_static/com.duckduckgo.mobile.android/ddg-upload-firebase.json' | |
| jobs: | |
| release-production: | |
| runs-on: ubuntu-latest | |
| name: Publish Bundle to Play Store Internal track | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: recursive | |
| token: ${{ secrets.GT_DAXMOBILE }} | |
| - name: Setup Gradle | |
| uses: gradle/actions/setup-gradle@v3 | |
| - name: Set up JDK 17 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '17' | |
| distribution: 'adopt' | |
| - name: Set up ruby env | |
| uses: ruby/setup-ruby@v1 | |
| with: | |
| ruby-version: 2.7.2 | |
| bundler-cache: true | |
| - name: Set up git config | |
| run: | | |
| git remote set-url origin https://${{ secrets.GT_DAXMOBILE }}@github.com/duckduckgo/Android.git/ | |
| git config --local user.email "github-actions[bot]@users.noreply.github.com" | |
| git config --local user.name "github-actions[bot]" | |
| - name: Decode upload keys | |
| uses: davidSchuppa/base64Secret-toFile-action@199e78f212c854d2284fada7f3cd3aba3e37d208 | |
| with: | |
| secret: ${{ secrets.UPLOAD_RELEASE_PROPERTIES }} | |
| fileName: ddg_android_build_upload.properties | |
| destination-path: $HOME/jenkins_static/com.duckduckgo.mobile.android/ | |
| - name: Decode key file | |
| uses: davidSchuppa/base64Secret-toFile-action@199e78f212c854d2284fada7f3cd3aba3e37d208 | |
| with: | |
| secret: ${{ secrets.UPLOAD_RELEASE_KEY }} | |
| fileName: ddg-upload-keystore.jks | |
| destination-path: $HOME/jenkins_static/com.duckduckgo.mobile.android/ | |
| - name: Decode Play Store credentials file | |
| uses: davidSchuppa/base64Secret-toFile-action@199e78f212c854d2284fada7f3cd3aba3e37d208 | |
| with: | |
| secret: ${{ secrets.UPLOAD_PLAY_CREDENTIALS }} | |
| fileName: api.json | |
| destination-path: $HOME/jenkins_static/com.duckduckgo.mobile.android/ | |
| - name: Assemble the bundle | |
| run: ./gradlew bundleRelease -PuseUploadSigning -Pbuild-date-time | |
| - name: Capture App Bundle Path | |
| id: capture_output | |
| run: | | |
| output=$(find app/build/outputs/bundle/playRelease -name "*.aab") | |
| echo "bundle_path=$output" >> $GITHUB_OUTPUT | |
| - name: Upload bundle to Play Store | |
| id: upload_bundle_play | |
| run: | | |
| bundle exec fastlane deploy_playstore | |
| - name: Upload Universal APK to Github | |
| id: upload_bundle_github | |
| run: | | |
| bundle exec fastlane deploy_github | |
| - name: Create Asana task when workflow failed | |
| if: ${{ failure() }} | |
| uses: duckduckgo/[email protected] | |
| with: | |
| asana-pat: ${{ secrets.GH_ASANA_SECRET }} | |
| asana-project: ${{ vars.GH_ANDROID_APP_PROJECT_ID }} | |
| asana-section: ${{ vars.GH_ANDROID_APP_INCOMING_SECTION_ID }} | |
| asana-task-name: GH Workflow Failure - Production Release | |
| asana-task-description: The Production Release to Play Store and Github workflow has failed. See https://github.com/duckduckgo/Android/actions/runs/${{ github.run_id }} | |
| action: 'create-asana-task' |