Bump android-ci pin so Sonar analyses develop

[aleksandar-apostolov]

Goal

Refs AND-1443

SonarCloud last analysed this repo's develop on 2025-12-19. The Sonar step in the
shared workflow is gated on a pull_request field that is empty on push, so it has
only ever run on PRs and never refreshes the branch baseline. Every PR gate here
measures new code against that frozen baseline.

Implementation

Bump the android-ci.yml pin in .github/workflows/android.yml to pick up
GetStream/stream-build-conventions-android#78. No other pin touched.

Testing

actionlint .github/workflows/android.yml — clean.

Draft until #78 merges. It is currently pinned to that PR's branch commit
(2e7e495). The conventions repo squash-merges and cuts version tags — the previous
pin 8b36d37d is v0.14.0 — so this must be re-pinned to the new release before it
can merge. Expect a large one-off issue count on the first clean develop analysis;
that is the backlog becoming visible, not a regression.

Summary by CodeRabbit

• Chores
  • Updated the Android build and validation workflow to use a newer shared configuration.
  • Existing triggers, permissions, concurrency settings, and secrets remain unchanged.

[github-actions]

PR checklist ✅

All required conditions are satisfied:

• Title length is OK (or ignored by label).
• At least one pr: label exists.
• Sections ### Goal, ### Implementation, and ### Testing are filled, or the PR is bot-authored.
• An issue is linked (Linear ticket or GitHub issue), or the PR is bot-authored.

🎉 Great job! This PR is ready for review.

[github-actions]

SDK Size Comparison 📏

SDK	Before	After	Difference	Status
stream-video-android-core	12.40 MB	12.41 MB	0.02 MB	🟢
stream-video-android-ui-xml	5.68 MB	5.68 MB	0.00 MB	🟢
stream-video-android-ui-compose	6.25 MB	6.23 MB	-0.02 MB	🚀

[coderabbitai]

Understand this PR’s impact

Explore downstream dependencies and potential security impact with Blast Radius.

View blast radius →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Advanced

Run ID: faf9ccd0-4595-4443-a92a-536599adbff7

📥 Commits

Reviewing files that changed from the base of the PR and between 49a9d83 and 9bd1a15.

📒 Files selected for processing (1)

• .github/workflows/android.yml

Included review availability: Your plan provides up to 2 included reviews per hour; 1 remains after this review.

---

Walkthrough

The Android CI workflow now references a newer commit of the shared stream-build-conventions-android reusable workflow. Job permissions, concurrency, triggers, and secrets remain unchanged.

Changes

Android CI

Layer / File(s)	Summary
Update reusable workflow reference .github/workflows/android.yml	The base-android-ci job now references commit 2e7e495bdf40615015a775812d606c034274e10a of the shared Android CI workflow.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Bug fix

Suggested reviewers: gpunto

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the main change: updating the Android CI pin to enable Sonar analyses on develop.
Description check	✅ Passed	The description includes the goal, implementation details, testing result, related issue, draft status, and required follow-up. UI, checklist, and reviewer sections are omitted, but they are not criti…
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit hops through checks anew
The Android workflow points to two
A pinned commit, neat and bright
Keeps the build path locked just right
CI ears twitch: all green in sight}

_{Comment @coderabbitai help to get the list of available commands.}

[rahul-lohra]

lgtm

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud