release.yml

name: Release

on:
  release:
    types: [ published ]

jobs:
  release:
    name: Release
    runs-on: ubuntu-latest
    env:
      TERM: dumb
    steps:
      - uses: actions/checkout@v4
        with:
          lfs: 'true'
      - name: set up JDK
        uses: actions/setup-java@v4
        with:
          distribution: 'zulu'
          java-version: 18
      - name: Decrypt secrets
        run: |
          echo ${{ secrets.ENCRYPT_KEY }} | release/signing-unpack.sh
          mv gradle.properties gradle.backup.properties
          cat gradle.backup.properties | grep -v configuration-cache > gradle.properties
      - name: Deploy to Sonatype
        run: ./gradlew publish
        env:
          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_NEXUS_USERNAME }}
          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_NEXUS_PASSWORD }}
      - name: Build AAB & APK
        run: |
          ./gradlew :catalog:bundleRelease :catalog:assembleRelease
      - name: Upload APK to release
        uses: softprops/action-gh-release@v1
        id: release
        with:
          files: |
            catalog/build/outputs/apk/release/catalog-release.apk
      - name: Prepare Release Notes
        run: |
          mkdir whatsnew
          URL=${{ steps.release.outputs.url }}
          echo "See full release notes at $URL" > whatsnew/whatsnew-en-US
      - name: Release to Google Play
        uses: r0adkll/upload-google-play@v1.1.3
        with:
          serviceAccountJson: release/service-account.json
          packageName: kiwi.orbit.compose.catalog
          releaseFiles: catalog/build/outputs/bundle/release/catalog-release.aab
          track: production
          status: completed
          whatsNewDirectory: whatsnew
          mappingFile: catalog/build/outputs/mapping/release/mapping.txt
      - name: Clean secrets
        if: always()
        run: release/signing-cleanup.sh