release-apk.yml

name: Release APK

on:
  push:
    tags:
      - 'v*'
  workflow_dispatch:
    inputs:
      version:
        description: 'Release tag name, e.g. v3.2.0'
        required: true
        type: string

jobs:
  build-release:
    name: Build and publish signed APK
    runs-on: ubuntu-24.04
    env:
      TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.version || github.ref_name }}
      REPO: ${{ github.repository }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up Temurin JDK 21
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: '21'
          cache: 'gradle'

      - name: Set up Android SDK
        uses: android-actions/setup-android@v3
        with:
          packages: ''

      - name: Install Android platform and build-tools
        run: |
          sdkmanager --install \
            "cmdline-tools;latest" \
            "platform-tools" \
            "platforms;android-36" \
            "build-tools;36.0.0"

      - name: Prepare release signing config
        env:
          KEYSTORE_BASE64: ${{ secrets.KEYSTORE_BASE64 }}
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
        run: |
          test -n "$KEYSTORE_BASE64" || { echo "KEYSTORE_BASE64 is required"; exit 1; }
          test -n "$KEYSTORE_PASSWORD" || { echo "KEYSTORE_PASSWORD is required"; exit 1; }
          test -n "$KEY_ALIAS" || { echo "KEY_ALIAS is required"; exit 1; }
          test -n "$KEY_PASSWORD" || { echo "KEY_PASSWORD is required"; exit 1; }
          echo "$KEYSTORE_BASE64" | base64 --decode > "$GITHUB_WORKSPACE/release-keystore.jks"
          test -s "$GITHUB_WORKSPACE/release-keystore.jks" || { echo "Decoded keystore is empty"; exit 1; }
          echo "KEYSTORE_PATH=$GITHUB_WORKSPACE/release-keystore.jks" >> "$GITHUB_ENV"
          echo "KEYSTORE_PASSWORD=$KEYSTORE_PASSWORD" >> "$GITHUB_ENV"
          echo "KEY_ALIAS=$KEY_ALIAS" >> "$GITHUB_ENV"
          echo "KEY_PASSWORD=$KEY_PASSWORD" >> "$GITHUB_ENV"

      - name: Grant execute permission for gradlew
        run: chmod +x ./gradlew

      - name: Assemble signed release APK
        env:
          KEYSTORE_PATH: ${{ env.KEYSTORE_PATH }}
          KEYSTORE_PASSWORD: ${{ env.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ env.KEY_ALIAS }}
          KEY_PASSWORD: ${{ env.KEY_PASSWORD }}
        run: ./gradlew :app:assembleRelease --no-daemon

      - name: Find release APK
        id: find_apk
        run: |
          set -e
          APK=$(find app/build/outputs -type f -name "*release*.apk" | head -n1)
          if [ -z "$APK" ]; then echo "No APK found"; exit 1; fi
          echo "apk_path=$APK" >> $GITHUB_OUTPUT

      - name: Copy & rename APK
        id: rename
        run: |
          mkdir -p release
          OUT=release/sysctlgui-${{ env.TAG }}.apk
          cp "${{ steps.find_apk.outputs.apk_path }}" "$OUT"
          echo "out_path=$OUT" >> $GITHUB_OUTPUT

      - name: Prepare release body (changelog + compare link)
        id: changelog
        run: |
          set -e
          git fetch --tags
          TAG=${{ env.TAG }}
          REPO=${{ env.REPO }}
          PREV_TAG=$(git tag --sort=-v:refname | grep -v "^${TAG}$" | head -n 1 || true)
          CHANGELOG_FILE=$(find fastlane/metadata/android/en-US/changelogs -maxdepth 1 -type f -name '*.txt' 2>/dev/null | sort -V | tail -n 1 || true)
          CHANGELOG=""
          if [ -n "$CHANGELOG_FILE" ]; then CHANGELOG=$(cat "$CHANGELOG_FILE"); fi
          if [ -n "$PREV_TAG" ]; then
            COMP="[${PREV_TAG}...${TAG}](https://github.com/${REPO}/compare/${PREV_TAG}...${TAG})"
          else
            COMP=""
          fi
          BODY=$(printf '%s\n' \
            "[${TAG}](https://github.com/${REPO}/releases/tag/${TAG}) [Latest](https://github.com/${REPO}/releases/latest)" \
            "" \
            "## What's Changed" \
            "" \
            "${CHANGELOG}" \
            "" \
            "**Full Changelog**: ${COMP}")
          echo "release_body<<EOF" >> "$GITHUB_OUTPUT"
          printf '%s\n' "$BODY" >> "$GITHUB_OUTPUT"
          echo "EOF" >> "$GITHUB_OUTPUT"
          echo "--- GENERATED RELEASE BODY ---"
          printf '%s\n' "$BODY"
          echo "--- END RELEASE BODY ---"

      - name: Create GitHub Release
        id: create_release
        uses: actions/create-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          tag_name: ${{ env.TAG }}
          release_name: ${{ env.TAG }}
          body: ${{ steps.changelog.outputs.release_body }}
          draft: false
          prerelease: false

      - name: Upload APK to Release
        uses: actions/upload-release-asset@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          upload_url: ${{ steps.create_release.outputs.upload_url }}
          asset_path: ${{ steps.rename.outputs.out_path }}
          asset_name: sysctlgui-${{ env.TAG }}.apk
          asset_content_type: application/vnd.android.package-archive