BarisKeser-ByeDPI/.github/workflows/release.yml

name: Release APK

on:
  push:
    branches: [ master ]
    tags: [ 'v*' ]
  workflow_dispatch:

permissions:
  contents: write

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout with submodules and tags
        uses: actions/checkout@v4
        with:
          submodules: recursive
          fetch-depth: 0

      - name: Compute version (auto patch bump)
        id: ver
        run: |
          if [ "${{ startsWith(github.ref, 'refs/tags/') }}" = "true" ]; then
            TAG="${GITHUB_REF_NAME}"
            NAME="${TAG#v}"
          else
            LATEST=$(git tag -l 'v[0-9]*.[0-9]*.[0-9]*' | sort -V | tail -n1)
            if [ -z "$LATEST" ]; then
              BASE=$(grep -m1 'versionName' app/build.gradle.kts | sed -E 's/.*"([^"]+)".*/\1/')
              LATEST="v${BASE}"
            fi
            VER="${LATEST#v}"
            MA=$(echo "$VER" | cut -d. -f1)
            MI=$(echo "$VER" | cut -d. -f2)
            PA=$(echo "$VER" | cut -d. -f3)
            PA=$((PA + 1))
            NAME="${MA}.${MI}.${PA}"
            TAG="v${NAME}"
          fi
          CODE="${GITHUB_RUN_NUMBER}"
          echo "tag=$TAG"   >> "$GITHUB_OUTPUT"
          echo "name=$NAME" >> "$GITHUB_OUTPUT"
          echo "code=$CODE" >> "$GITHUB_OUTPUT"
          echo "Release: tag=$TAG name=$NAME code=$CODE"

      - name: Set up JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: '17'

      - name: Set up Android SDK
        uses: android-actions/setup-android@v3

      - name: Install NDK r27, CMake and SDK 36
        run: |
          yes | sdkmanager --licenses >/dev/null 2>&1 || true
          sdkmanager "platforms;android-36" "build-tools;36.0.0" "ndk;27.2.12479018" "cmake;3.22.1"

      - name: Decode signing keystore
        env:
          KEYSTORE_BASE64: ${{ secrets.KEYSTORE_BASE64 }}
        run: |
          if [ -n "$KEYSTORE_BASE64" ]; then
            echo "$KEYSTORE_BASE64" | base64 -d > "$RUNNER_TEMP/release.jks"
            echo "KEYSTORE_FILE=$RUNNER_TEMP/release.jks" >> "$GITHUB_ENV"
            echo "Keystore decoded; the release APK will be signed."
          else
            echo "::warning::No KEYSTORE_BASE64 secret set — building an UNSIGNED release APK."
          fi

      - name: Grant execute permission for gradlew
        run: chmod +x ./gradlew

      - name: Build release APK (sideload) + AAB (Google Play)
        env:
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
        run: >
          ./gradlew assembleRelease bundleRelease --stacktrace
          -PappVersionName=${{ steps.ver.outputs.name }}
          -PappVersionCode=${{ steps.ver.outputs.code }}

      - name: Locate build outputs
        id: out
        run: |
          APK=$(find app/build/outputs/apk/release -name "*.apk" | head -n1)
          AAB=$(find app/build/outputs/bundle/release -name "*.aab" | head -n1)
          echo "apk=$APK" >> "$GITHUB_OUTPUT"
          echo "aab=$AAB" >> "$GITHUB_OUTPUT"
          echo "APK: $APK"
          echo "AAB: $AAB"

      - name: Upload APK artifact
        uses: actions/upload-artifact@v4
        with:
          name: byedpi-release-apk
          path: app/build/outputs/apk/release/*.apk

      - name: Upload AAB artifact (Play)
        uses: actions/upload-artifact@v4
        with:
          name: byedpi-release-aab
          path: app/build/outputs/bundle/release/*.aab

      - name: Publish GitHub Release (auto-tag)
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          TAG="${{ steps.ver.outputs.tag }}"
          echo "Publishing release $TAG"
          if gh release view "$TAG" >/dev/null 2>&1; then
            gh release upload "$TAG" \
              "${{ steps.out.outputs.apk }}" "${{ steps.out.outputs.aab }}" --clobber
          else
            gh release create "$TAG" \
              "${{ steps.out.outputs.apk }}" "${{ steps.out.outputs.aab }}" \
              --title "BarisKeser-ByeDPI $TAG" --generate-notes --target "${GITHUB_SHA}"
          fi