release: prepare TypeType Android 1.11.0

.github/workflows/android-beta.yml

@@ -6,6 +6,9 @@ on:
       - beta
     paths:
       - 'app/**'
+      - 'build-logic/**'
+      - 'core/**'
+      - 'feature/**'
       - 'player/**'
       - 'baseline-profile/**'
       - 'gradle/**'
@@ -17,6 +20,9 @@ on:
       - beta
     paths:
       - 'app/**'
+      - 'build-logic/**'
+      - 'core/**'
+      - 'feature/**'
       - 'player/**'
       - 'baseline-profile/**'
       - 'gradle/**'
@@ -36,38 +42,38 @@ env:
   CI: true
   FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
   JAVA_TOOL_OPTIONS: -Djava.awt.headless=true
-  GRADLE_OPTS: -Dorg.gradle.workers.max=8 -Dorg.gradle.daemon.idletimeout=900000
-  ANDROID_HOME: /opt/android-sdk
-  ANDROID_SDK_ROOT: /opt/android-sdk
-  JAVA_HOME: /usr/lib/jvm/java-26-openjdk
-  GRADLE_USER_HOME: /var/tmp/typetype-android-gradle-user-home
   GITHUB_REPO: TypeType-Video/TypeType-Android
 
 jobs:
   release:
-    runs-on: [self-hosted, Linux, X64, ci-stack, android]
-    timeout-minutes: 35
-    permissions:
-      contents: write
+    runs-on: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository && fromJSON('["self-hosted","stack-android"]') || 'ubuntu-latest' }}
+    timeout-minutes: 50
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+      tag: ${{ steps.version.outputs.tag }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v7.0.1
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Set up Java
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+        with:
+          distribution: temurin
+          java-version: 21
+
+      - name: Set up Gradle
+        uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0
+        with:
+          cache-disabled: ${{ runner.environment == 'self-hosted' }}
 
       - name: Install Android SDK platform
+        if: ${{ runner.environment == 'github-hosted' }}
         run: |
-          platform="$ANDROID_HOME/platforms/android-37.0"
-          (
-            flock 9
-            if [ ! -f "$platform/android.jar" ]; then
-              rm -rf "$platform"
-              "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" \
-                --sdk_root="$ANDROID_HOME" \
-                "platforms;android-37.0"
-            fi
-            test -f "$platform/android.jar"
-          ) 9>"$ANDROID_HOME/.platform-install.lock"
+          "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" --install \
+            "platforms;android-37.0" "build-tools;36.0.0" > /dev/null
 
       - name: Validate beta release version
+        id: version
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
@@ -102,8 +108,13 @@ jobs:
             echo "RELEASE_CODE=${version_code}"
             echo "RELEASE_TAG=${release_tag}"
           } >> "$GITHUB_ENV"
+          {
+            echo "version=${version_name}"
+            echo "tag=${release_tag}"
+          } >> "$GITHUB_OUTPUT"
 
       - name: Prepare signing
+        if: ${{ github.event_name != 'pull_request' }}
         env:
           ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
           ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
@@ -123,25 +134,22 @@ jobs:
           } > keystore.properties
 
       - name: Verify and build beta release
-        timeout-minutes: 25
+        timeout-minutes: 40
         run: |
-          ./gradlew --build-cache --stacktrace \
+          ./gradlew --stacktrace \
             :baseline-profile:assemble \
-            :player:testDebugUnitTest \
-            :app:testDebugUnitTest \
-            :player:lintDebug \
-            :app:lintDebug \
+            testDebugUnitTest \
+            lintDebug \
             :app:assembleDebug \
             :app:assembleRelease
 
       - name: Upload lint report
         if: ${{ always() }}
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: typetype-beta-lint-report
           path: |
-            app/build/reports/lint-results-debug.html
-            player/build/reports/lint-results-debug.html
+            **/build/reports/lint-results-debug.html
           if-no-files-found: ignore
           retention-days: 14
 
@@ -155,7 +163,9 @@ jobs:
           test -n "$build_tools"
 
           "$build_tools/zipalign" -c -P 16 -v 4 "$apk"
-          "$build_tools/apksigner" verify --verbose --print-certs "$apk"
+          if [ "$GITHUB_EVENT_NAME" != pull_request ]; then
+            "$build_tools/apksigner" verify --verbose --print-certs "$apk"
+          fi
 
           apk_application_id="$("$ANDROID_HOME/cmdline-tools/latest/bin/apkanalyzer" manifest application-id "$apk")"
           apk_version="$("$ANDROID_HOME/cmdline-tools/latest/bin/apkanalyzer" manifest version-name "$apk")"
@@ -172,19 +182,53 @@ jobs:
             sha256sum -c "dev.typetype.android_${RELEASE_CODE}.apk.sha256"
           )
 
+      - name: Prepare beta update manifest
+        run: |
+          apk_name="dev.typetype.android_"$RELEASE_CODE".apk"
+          apk_sha256="$(cut -d ' ' -f1 "artifacts/$apk_name.sha256")"
+          jq -n \
+            --arg channel beta \
+            --arg packageName dev.typetype.android \
+            --arg versionName "$RELEASE_VERSION" \
+            --argjson versionCode "$RELEASE_CODE" \
+            --arg apkAsset "$apk_name" \
+            --arg sha256 "$apk_sha256" \
+            '{schemaVersion:1,channel:$channel,packageName:$packageName,versionName:$versionName,versionCode:$versionCode,apkAsset:$apkAsset,sha256:$sha256}' \
+            > artifacts/typetype-update.json
+
       - name: Upload beta APK
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: typetype-beta-apk
           path: |
             artifacts/*.apk
             artifacts/*.sha256
+            artifacts/typetype-update.json
           if-no-files-found: error
           compression-level: 0
           retention-days: 30
 
+  publish:
+    needs: release
+    if: ${{ github.event_name != 'pull_request' }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      contents: write
+    env:
+      RELEASE_VERSION: ${{ needs.release.outputs.version }}
+      RELEASE_TAG: ${{ needs.release.outputs.tag }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Download beta APK
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
+        with:
+          name: typetype-beta-apk
+          path: artifacts
+
       - name: Prepare beta release notes
-        if: ${{ github.event_name != 'pull_request' }}
         env:
           HEAD_MESSAGE: ${{ github.event.head_commit.message }}
         run: |
@@ -195,8 +239,7 @@ jobs:
           fi
 
       - name: Publish GitHub prerelease
-        if: ${{ github.event_name != 'pull_request' }}
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
         with:
           tag_name: ${{ env.RELEASE_TAG }}
           name: TypeType Android ${{ env.RELEASE_VERSION }}
@@ -208,4 +251,5 @@ jobs:
           files: |
             artifacts/*.apk
             artifacts/*.sha256
+            artifacts/typetype-update.json
           fail_on_unmatched_files: true