mirror of
https://github.com/avinal/nikki.git
synced 2026-07-03 21:40:09 +05:30
avinal
e4c19c2d7c
Notifications: - VISIBILITY_PRIVATE on all channels and notifications (hides task text from lockscreen) - Remove setFullScreenIntent (requires USE_FULL_SCREEN_INTENT permission; p1 channel already bypasses DND) Auth: - Clear cached token and server URL in memory on logout via AuthRepository.onLogout callback Offline queue: - Replace manual JSON string interpolation with kotlinx.serialization JsonObject/JsonPrimitive (prevents JSON injection from memo content) CI/CD: - Pin all GitHub Actions to commit SHAs - Add permissions: contents: read to build workflow - Decode keystore via env var instead of inline expansion - Sanitize tag name through env var in release upload - Fix test task name: testAndroidHostTest Signed-off-by: Avinal Kumar <avinal.xlvii@gmail.com> Co-Authored-By: Claude Opus 4.6 (1M context)
47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
name: Release
|
|
|
|
on:
|
|
release:
|
|
types: [created]
|
|
|
|
concurrency:
|
|
group: release-${{ github.event.release.tag_name }}
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: write
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-java@v4
|
|
with:
|
|
distribution: temurin
|
|
java-version: 21
|
|
|
|
- uses: gradle/actions/setup-gradle@v4
|
|
|
|
- name: Decode keystore
|
|
env:
|
|
KEYSTORE_BASE64: ${{ secrets.KEYSTORE_BASE64 }}
|
|
run: echo "$KEYSTORE_BASE64" | base64 -d > "${{ runner.temp }}/keystore.jks"
|
|
|
|
- name: Build signed release APK
|
|
env:
|
|
KEYSTORE_PATH: ${{ runner.temp }}/keystore.jks
|
|
KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
|
|
KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
|
|
KEY_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
|
|
run: ./gradlew :androidApp:assembleRelease
|
|
|
|
- name: Upload release APK
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
TAG: ${{ github.event.release.tag_name }}
|
|
run: |
|
|
mv androidApp/build/outputs/apk/release/androidApp-release.apk "nikki-${TAG}.apk"
|
|
gh release upload "${TAG}" "nikki-${TAG}.apk"
|