Deploy Action #340
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| push: | |
| branches: [master, develop] | |
| workflow_dispatch: | |
| name: Deploy Action | |
| jobs: | |
| build: | |
| permissions: | |
| actions: "write" | |
| name: "Bump version and Build App Bundle" | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: ${{ github.ref_name }} | |
| env: | |
| PROPERTIES_PATH: "android/key.properties" | |
| JAVA_VERSION: "17.x" | |
| FLUTTER_VERSION: "3.13.7" | |
| APP_VERSION_PATH: "app_version.txt" | |
| PUBSPEC_PATH: "pubspec.yaml" | |
| defaults: | |
| run: | |
| working-directory: ./uni | |
| steps: | |
| - uses: actions/checkout@v4 | |
| with: | |
| token: ${{ secrets.NIAEFEUPBOT_PAT }} | |
| fetch-depth: 0 | |
| - name: Get develop hash | |
| if: github.ref == 'refs/heads/master' | |
| # We get the master hash by assuming that the last commit is always a | |
| # merge commit. This is assured by requiring pull requests. You should NOT | |
| # use rebase or squash merges onto the master branch. | |
| run: | | |
| git fetch origin develop | |
| git pull origin master | |
| echo "DEVELOP_HASH=$(git rev-parse origin/develop)" >> $GITHUB_ENV | |
| echo "MASTER_HASH=$(git rev-parse origin/master^2)" >> $GITHUB_ENV | |
| - name: Get latest version (develop) | |
| if: github.ref != 'refs/heads/master' | |
| uses: LuisDuarte1/[email protected] | |
| id: latest-beta-version | |
| with: | |
| google_service_account_json: ${{ secrets.GOOGLE_SERVICE_ACCOUNT_JSON }} | |
| package_name: ${{ secrets.ANDROID_PACKAGE_NAME }} | |
| track: "beta" | |
| - name: Get latest production version | |
| uses: LuisDuarte1/[email protected] | |
| id: latest-production-version | |
| with: | |
| google_service_account_json: ${{ secrets.GOOGLE_SERVICE_ACCOUNT_JSON }} | |
| package_name: ${{ secrets.ANDROID_PACKAGE_NAME }} | |
| track: "production" | |
| - name: Bump beta version | |
| uses: LuisDuarte1/[email protected] | |
| if: github.ref != 'refs/heads/master' | |
| id: bump-beta-version | |
| with: | |
| current_environment: staging | |
| production_version: ${{ steps.latest-production-version.outputs.latest_version_name }} | |
| staging_version: ${{ steps.latest-beta-version.outputs.latest_version_name }} | |
| bump_type: prerelease | |
| - name: Bump prod version (from develop) | |
| uses: LuisDuarte1/[email protected] | |
| if: github.ref == 'refs/heads/master' && env.MASTER_HASH == env.DEVELOP_HASH | |
| id: bump-prod-minor-version | |
| with: | |
| current_environment: production | |
| production_version: ${{ steps.latest-production-version.outputs.latest_version_name }} | |
| bump_type: minor | |
| - name: Bump prod version (patch) | |
| uses: LuisDuarte1/[email protected] | |
| if: github.ref == 'refs/heads/master' && env.MASTER_HASH != env.DEVELOP_HASH | |
| id: bump-prod-patch-version | |
| with: | |
| current_environment: production | |
| production_version: ${{ steps.latest-production-version.outputs.latest_version_name }} | |
| bump_type: patch | |
| - name: Combine output and write new version into file | |
| run: | | |
| export NEW_VERSION_NAME=${{ | |
| (steps.bump-beta-version.outcome == 'success' && steps.bump-beta-version.outputs.new_version) || | |
| (steps.bump-prod-minor-version.outcome == 'success' && steps.bump-prod-minor-version.outputs.new_version) || | |
| (steps.bump-prod-patch-version.outcome == 'success' && steps.bump-prod-patch-version.outputs.new_version) | |
| }} | |
| echo "$NEW_VERSION_NAME+$((${{steps.latest-production-version.outputs.latest_version_code}} + 1))" > ${{env.APP_VERSION_PATH}} | |
| - name: Copy app version to pubspec | |
| run: cat ${{ env.APP_VERSION_PATH }} | tr -d '\n' | perl -i -pe 's/^(version:\s+)(.+)$/$1.(<STDIN>)/e' ${{ env.PUBSPEC_PATH }} | |
| - uses: stefanzweifel/git-auto-commit-action@v4 | |
| with: | |
| commit_message: "Bump app version [no ci]" | |
| - uses: actions/setup-java@v3 | |
| with: | |
| java-version: ${{env.JAVA_VERSION}} | |
| distribution: "zulu" | |
| - uses: subosito/flutter-action@v2 | |
| with: | |
| flutter-version: ${{ env.FLUTTER_VERSION }} | |
| - name: Download Android keystore | |
| run: echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | base64 --decode > /tmp/key.jks | |
| - name: Create key.properties | |
| run: | | |
| rm -f -- ${{env.PROPERTIES_PATH}} | |
| touch ${{env.PROPERTIES_PATH}} | |
| echo "storeFile=/tmp/key.jks" >> ${{env.PROPERTIES_PATH}} | |
| echo "storePassword=${{ secrets.ANDROID_KEYSTORE_PASSWORD }}" >> ${{env.PROPERTIES_PATH}} | |
| echo "keyPassword=${{ secrets.ANDROID_KEY_PASSWORD }}" >> ${{env.PROPERTIES_PATH}} | |
| echo "keyAlias=${{ secrets.ANDROID_KEY_ALIAS }}" >> ${{env.PROPERTIES_PATH}} | |
| - name: Create .env file | |
| run: echo "${{vars.UNI_ENV_FILE}}" > ./assets/env/.env | |
| - name: Build Android App Bundle | |
| run: | | |
| flutter pub get | |
| flutter build appbundle | |
| - name: Upload App Bundle | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: appbundle | |
| if-no-files-found: error | |
| path: uni/build/app/outputs/bundle/release/app-release.aab | |
| deploy_play_store: | |
| name: "Deploy to Google Play Store" | |
| runs-on: ubuntu-latest | |
| needs: [build] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Get App Bundle | |
| uses: actions/download-artifact@v3 | |
| with: | |
| name: appbundle | |
| - name: Release app to beta track | |
| if: github.ref == 'refs/heads/develop' | |
| uses: r0adkll/upload-google-play@v1 | |
| with: | |
| serviceAccountJsonPlainText: ${{ secrets.GOOGLE_SERVICE_ACCOUNT_JSON }} | |
| packageName: ${{ secrets.ANDROID_PACKAGE_NAME }} | |
| releaseFiles: app-release.aab | |
| whatsNewDirectory: whatsnew | |
| track: beta | |
| status: completed | |
| - name: Release app to production track | |
| if: github.ref == 'refs/heads/master' | |
| uses: r0adkll/upload-google-play@v1 | |
| with: | |
| serviceAccountJsonPlainText: ${{ secrets.GOOGLE_SERVICE_ACCOUNT_JSON }} | |
| packageName: ${{ secrets.ANDROID_PACKAGE_NAME }} | |
| releaseFiles: app-release.aab | |
| whatsNewDirectory: whatsnew | |
| track: production | |
| status: completed | |
| - name: Propagate version to develop | |
| if: github.ref == 'refs/heads/master' | |
| run: | | |
| echo '${{ secrets.NIAEFEUPBOT_PAT }}' | gh auth login --with-token | |
| gh workflow run 'Deploy Action' --ref develop |