1name: Android Client 2 3on: 4 workflow_dispatch: 5 inputs: 6 releaseAPK: 7 description: 'type "release-apk" to confirm upload to S3' 8 required: false 9 releaseGooglePlay: 10 description: 'type "release-google-play" to confirm release to Google Play' 11 required: false 12 schedule: 13 - cron: '20 5 * * 1,3,5' # 5:20 AM UTC time on every Monday, Wednesday and Friday 14 pull_request: 15 paths: 16 - .github/workflows/client-android.yml 17 - secrets/** 18 - android/** 19 - fastlane/** 20 - Gemfile.lock 21 - .ruby-version 22 - yarn.lock 23 push: 24 branches: [main, sdk-*] 25 paths: 26 - .github/workflows/client-android.yml 27 - secrets/** 28 - android/** 29 - fastlane/** 30 - Gemfile.lock 31 - .ruby-version 32 - yarn.lock 33 34concurrency: 35 group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref }} 36 cancel-in-progress: true 37 38jobs: 39 build: 40 runs-on: ubuntu-20.04 41 env: 42 GRADLE_OPTS: -Dorg.gradle.jvmargs=-Xmx2048m -XX:MaxMetaspaceSize=1024m 43 steps: 44 - name: �� Checkout 45 uses: actions/checkout@v3 46 with: 47 submodules: true 48 - name: �� Use JDK 11 49 uses: actions/setup-java@v3 50 with: 51 distribution: 'temurin' 52 java-version: '11' 53 - name: ♻️ Restore workspace node modules 54 uses: actions/cache@v2 55 id: node-modules-cache 56 with: 57 path: | 58 # See "workspaces" → "packages" in the root package.json for the source of truth of 59 # which node_modules are affected by the root yarn.lock 60 node_modules 61 apps/*/node_modules 62 home/node_modules 63 packages/*/node_modules 64 packages/@expo/*/node_modules 65 react-native-lab/react-native/node_modules 66 key: ${{ runner.os }}-modules-${{ hashFiles('yarn.lock') }} 67 - run: echo "$(pwd)/bin" >> $GITHUB_PATH 68 - name: ♻️ Restore node modules in tools 69 uses: actions/cache@v2 70 with: 71 path: tools/node_modules 72 key: ${{ runner.os }}-tools-modules-${{ hashFiles('tools/yarn.lock') }} 73 - name: �� Yarn install 74 run: yarn install --frozen-lockfile 75 - name: �� Setup Ruby and install gems 76 uses: ruby/setup-ruby@v1 77 with: 78 bundler-cache: true 79 - name: �� Install git-crypt 80 run: sudo apt-get install git-crypt 81 - name: �� Decrypt secrets if possible 82 env: 83 GIT_CRYPT_KEY_BASE64: ${{ secrets.GIT_CRYPT_KEY_BASE64 }} 84 run: | 85 if [ -z "${GIT_CRYPT_KEY_BASE64}" ]; then 86 echo 'git-crypt key not present in environment' 87 else 88 git crypt unlock <(echo $GIT_CRYPT_KEY_BASE64 | base64 --decode) 89 fi 90 - name: ♻️ Restore Gradle caches 91 uses: actions/cache@v2 92 with: 93 path: ~/.gradle/caches 94 key: ${{ runner.os }}-gradle-${{ hashFiles('android/*.gradle*') }} 95 restore-keys: | 96 ${{ runner.os }}-gradle- 97 - name: �� Check which flavor to build 98 id: flavor 99 uses: dorny/paths-filter@v2 100 with: 101 # this action fails when base is not set on schedule event 102 base: ${{ github.ref }} 103 filters: | 104 versioned: 105 - android/versioned-abis/** 106 - android/versioned-react-native/** 107 - android/expoview/src/versioned/** 108 - android/expoview/src/main/java/versioned/** 109 - android/**/*.gradle 110 - name: �� Build APK 111 env: 112 ANDROID_KEYSTORE_B64: ${{ secrets.ANDROID_KEYSTORE_B64 }} 113 ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }} 114 ANDROID_KEY_ALIAS: ExponentKey 115 ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }} 116 IS_APP_BUNDLE: ${{ github.event.inputs.releaseGooglePlay == 'release-google-play' }} 117 IS_RELEASE_BUILD: ${{ github.event.inputs.releaseAPK == 'release-apk' || github.event.inputs.releaseGooglePlay == 'release-google-play' }} 118 IS_VERSIONED_FLAVOR: ${{ github.event_name == 'schedule' || steps.flavor.outputs.versioned == 'true' }} 119 run: | 120 if [ "$IS_RELEASE_BUILD" == "false" ]; then 121 export ORG_GRADLE_PROJECT_reactNativeArchitectures="x86_64" 122 BUILD_TYPE="Debug" 123 echo "Using ABI filters: $ORG_GRADLE_PROJECT_reactNativeArchitectures" 124 else 125 BUILD_TYPE="Release" 126 fi 127 [[ "$IS_VERSIONED_FLAVOR" == "true" ]] && FLAVOR="Versioned" || FLAVOR="Unversioned" 128 echo "Building with $FLAVOR flavor" 129 if [ -z "$ANDROID_KEYSTORE_B64" ]; then 130 echo "External build detected, APK will not be signed" 131 bin/fastlane android build build_type:$BUILD_TYPE flavor:$FLAVOR sign:false 132 else 133 echo "Internal build detected, APK will be signed" 134 echo $ANDROID_KEYSTORE_B64 | base64 -d > android/app/release-key.jks 135 bin/fastlane android build build_type:$BUILD_TYPE flavor:$FLAVOR aab:$IS_APP_BUNDLE 136 fi 137 - name: �� Upload APK artifact 138 uses: actions/upload-artifact@v3 139 with: 140 name: android-apk 141 path: android/app/build/outputs/apk 142 - name: �� Store daemon logs for debugging crashes 143 if: failure() 144 uses: actions/upload-artifact@v3 145 with: 146 name: gradle-daemon-logs 147 path: ~/.gradle/daemon 148 - name: �� Upload APK to S3 and update staging versions endpoint 149 if: ${{ github.event.inputs.releaseAPK == 'release-apk' }} 150 run: bin/expotools client-build --platform android --release 151 env: 152 AWS_ACCESS_KEY_ID: AKIAJ3SWUQ4QLNQC7FXA 153 AWS_SECRET_ACCESS_KEY: ${{ secrets.android_client_build_aws_secret_key }} 154 AWS_DEFAULT_REGION: 'us-east-1' 155 EXPO_VERSIONS_SECRET: ${{ secrets.expo_versions_secret }} 156 - name: �� Upload APK to Google Play and release to production 157 if: ${{ github.event.inputs.releaseGooglePlay == 'release-google-play' }} 158 run: bin/fastlane android prod_release 159 env: 160 SUPPLY_JSON_KEY_DATA: ${{ secrets.SUPPLY_JSON_KEY_DATA }} 161 - name: �� Notify on Slack 162 uses: 8398a7/action-slack@v3 163 if: failure() && (github.event.ref == 'refs/heads/main' || startsWith(github.event.ref, 'refs/heads/sdk-')) 164 env: 165 GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} 166 SLACK_WEBHOOK_URL: ${{ secrets.slack_webhook_android }} 167 with: 168 channel: '#expo-android' 169 status: ${{ job.status }} 170 fields: job,message,ref,eventName,author,took 171 author_name: Expo Go (Android) 172