xref: /expo/.github/workflows/client-android.yml (revision 2cfc8c5a)

name: Android Client

on:
  workflow_dispatch:
    inputs:
      releaseAPK:
        description: 'type "release-apk" to confirm upload to S3'
        required: false
      releaseGooglePlay:
        description: 'type "release-google-play" to confirm release to Google Play'
        required: false
  pull_request:
    paths:
      - .github/workflows/client-android.yml
      - secrets/**
      - android/**
      - fastlane/**
      - Gemfile.lock
      - .ruby-version
      - yarn.lock
  push:
    branches: [master, sdk-*]
    paths:
      - .github/workflows/client-android.yml
      - secrets/**
      - android/**
      - fastlane/**
      - Gemfile.lock
      - .ruby-version
      - yarn.lock

concurrency:
  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    runs-on: ubuntu-18.04
    steps:
      - name: �� Checkout
        uses: actions/checkout@v2
        with:
          submodules: true
      - name: ♻️ Restore workspace node modules
        uses: actions/cache@v2
        id: node-modules-cache
        with:
          path: |
            # See "workspaces" → "packages" in the root package.json for the source of truth of
            # which node_modules are affected by the root yarn.lock
            node_modules
            apps/*/node_modules
            home/node_modules
            packages/*/node_modules
            packages/@unimodules/*/node_modules
            react-native-lab/react-native/node_modules
          key: ${{ runner.os }}-modules-${{ hashFiles('yarn.lock') }}
      - name: ♻️ Restore node modules in tools
        uses: actions/cache@v2
        with:
          path: tools/node_modules
          key: ${{ runner.os }}-tools-modules-${{ hashFiles('tools/yarn.lock') }}
      - name: �� Yarn install
        run: yarn install --frozen-lockfile
      - name: �� Setup Ruby and install gems
        uses: ruby/setup-ruby@v1
        with:
          bundler-cache: true
      - name: �� Install git-crypt
        run: sudo apt-get install git-crypt
      - name: �� Decrypt secrets if possible
        env:
          GIT_CRYPT_KEY_BASE64: ${{ secrets.GIT_CRYPT_KEY_BASE64 }}
        run: |
          if [ -z "${GIT_CRYPT_KEY_BASE64}" ]; then
            echo 'git-crypt key not present in environment'
          else
            git crypt unlock <(echo $GIT_CRYPT_KEY_BASE64 | base64 --decode)
          fi
      - name: ♻️ Restore Gradle caches
        uses: actions/cache@v2
        with:
          path: ~/.gradle/caches
          key: ${{ runner.os }}-gradle-${{ hashFiles('android/*.gradle*') }}
          restore-keys: |
            ${{ runner.os }}-gradle-
      - name: ♻️ Restore Android NDK from cache
        uses: actions/cache@v2
        id: cache-android-ndk
        with:
          path: /usr/local/lib/android/sdk/ndk/19.2.5345600/
          key: ${{ runner.os }}-ndk-19.2.5345600
          restore-keys: |
            ${{ runner.os }}-ndk-
      - name: �� Install NDK
        if: steps.cache-android-ndk.outputs.cache-hit != 'true'
        run: |
          sudo $ANDROID_SDK_ROOT/tools/bin/sdkmanager --install "ndk;19.2.5345600"
      - name: �� Build APK
        env:
          ANDROID_KEYSTORE_B64: ${{ secrets.ANDROID_KEYSTORE_B64 }}
          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
          ANDROID_KEY_ALIAS: ExponentKey
          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
          ANDROID_NDK_HOME: /usr/local/lib/android/sdk/ndk/19.2.5345600/
          IS_RELEASE_BUILD: ${{ github.event.inputs.releaseAPK == 'release-apk' || github.event.inputs.releaseGooglePlay == 'release-google-play' }}
        run: |
          if [ "$IS_RELEASE_BUILD" == "false" ]; then
            export NDK_ABI_FILTERS="x86_64"
            BUILD_TYPE="Debug"
            echo "Using ABI filters: $NDK_ABI_FILTERS"
          else
            BUILD_TYPE="Release"
          fi
          if [ -z "$ANDROID_KEYSTORE_B64" ]; then
            echo "External build detected, APK will not be signed"
            bin/fastlane android build build_type:$BUILD_TYPE sign:false
          else
            echo "Internal build detected, APK will be signed"
            echo $ANDROID_KEYSTORE_B64 | base64 -d > android/app/release-key.jks
            bin/fastlane android build build_type:$BUILD_TYPE
          fi
      - name: �� Upload APK artifact
        uses: actions/upload-artifact@v2
        with:
          name: android-apk
          path: android/app/build/outputs/apk
      - name: �� Store daemon logs for debugging crashes
        if: failure()
        uses: actions/upload-artifact@v2
        with:
          name: gradle-daemon-logs
          path: ~/.gradle/daemon
      - name: �� Upload APK to S3 and update staging versions endpoint
        if: ${{ github.event.inputs.releaseAPK == 'release-apk' }}
        run: bin/expotools client-build --platform android --release
        env:
          AWS_ACCESS_KEY_ID: AKIAJ3SWUQ4QLNQC7FXA
          AWS_SECRET_ACCESS_KEY: ${{ secrets.android_client_build_aws_secret_key }}
          EXPO_VERSIONS_SECRET: ${{ secrets.expo_versions_secret }}
      - name: �� Upload APK to Google Play and release to production
        if: ${{ github.event.inputs.releaseGooglePlay == 'release-google-play' }}
        run: bin/fastlane android prod_release
        env:
          SUPPLY_JSON_KEY_DATA: ${{ secrets.SUPPLY_JSON_KEY_DATA }}
      - name: �� Notify on Slack
        uses: 8398a7/action-slack@v3
        if: failure() && (github.event.ref == 'refs/heads/master' || startsWith(github.event.ref, 'refs/heads/sdk-'))
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SLACK_WEBHOOK_URL: ${{ secrets.slack_webhook_android }}
        with:
          channel: '#platform-android'
          status: ${{ job.status }}
          fields: job,message,ref,eventName,author,took
          author_name: Expo Go (Android)