bsky-social-app/.gitea/workflows/build-android.yaml

name: Build Custom Bluesky APK

on:
  push:
    branches:
      - main
  workflow_dispatch:

jobs:
  build-android:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Source Code
        uses: actions/checkout@v4

      - name: Set up Node.js Environment
        uses: actions/setup-node@v4
        with:
          node-version-file: '.nvmrc'

      - name: Set up Java Development Kit (JDK)
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '17'

      - name: Install Android SDK Dependencies
        uses: android-actions/setup-android@v3

      - name: Pre-install Required NDK Versions
        run: |
          for ndk_version in "27.1.12297006" "27.0.12077973"; do
            echo "Installing NDK $ndk_version..."
            for attempt in 1 2 3; do
              if yes | sdkmanager --install "ndk;$ndk_version" --sdk_root="$ANDROID_HOME"; then
                echo "NDK $ndk_version installed successfully"
                break
              else
                echo "Attempt $attempt failed, retrying in 10s..."
                sleep 10
              fi
            done
          done

      - name: Enable Corepack
        run: corepack enable

      - name: Get pnpm store directory
        id: pnpm-cache
        run: echo "STORE_PATH=$(pnpm store path)" >> "$GITHUB_OUTPUT"

      - name: Cache pnpm store
        uses: actions/cache@v4
        with:
          path: ${{ steps.pnpm-cache.outputs.STORE_PATH }}
          key: pnpm-store-${{ hashFiles('pnpm-lock.yaml') }}
          restore-keys: |
            pnpm-store-

      - name: Install Project Dependencies
        run: pnpm install --frozen-lockfile --network-concurrency 4 --fetch-timeout 120000

      - name: Compile Translations
        run: pnpm intl:compile

      - name: Install EAS CLI
        run: |
          pnpm config set global-bin-dir /root/.local/share/pnpm/bin
          echo "/root/.local/share/pnpm/bin" >> "$GITHUB_PATH"
          export PATH="/root/.local/share/pnpm/bin:$PATH"
          pnpm add -g eas-cli
          eas --version

      - name: Inject Private Firebase Configuration
        run: |
          echo "${{ secrets.FIREBASE_JSON_BASE64 }}" | base64 -d > google-services.json

      - name: Inject Release Keystore Certificate
        run: |
          echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | base64 -d > release.keystore

      - name: Generate Local Credentials File
        env:
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
        run: |
          cat <<EOF > credentials.json
          {
            "android": {
              "keystore": {
                "keystorePath": "release.keystore",
                "keystorePassword": "$KEYSTORE_PASSWORD",
                "keyAlias": "$KEY_ALIAS",
                "keyPassword": "$KEY_PASSWORD"
              }
            }
          }
          EOF

      - name: Run EAS Local Build
        env:
          EAS_NO_VCS: 1
          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
          ORG_GRADLE_PROJECT_reactNativeArchitectures: arm64-v8a
        run: |
          eas build --platform android --profile selfhosted-android --local --non-interactive --output ./bluesky-custom.apk

      - name: Upload Signed Application Artifact
        uses: actions/upload-artifact@v3
        with:
          name: Bluesky-Custom-Release
          path: bluesky-custom.apk

      - name: Create Rolling Latest Release with APK
        env:
          GITEA_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GITEA_API: ${{ github.server_url }}/api/v1
          REPO: ${{ github.repository }}
        run: |
          echo "API base: $GITEA_API"
          echo "Repo: $REPO"

          TAG="latest"

          EXISTING_RELEASE=$(curl -sS -w "\nHTTP_STATUS:%{http_code}" \
            -H "Authorization: token $GITEA_TOKEN" \
            "$GITEA_API/repos/$REPO/releases/tags/$TAG")
          echo "Existing release lookup response: $EXISTING_RELEASE"

          EXISTING_ID=$(echo "$EXISTING_RELEASE" | grep -o '"id":[0-9]*' | head -1 | grep -o '[0-9]*')

          if [ -n "$EXISTING_ID" ]; then
            echo "Deleting existing release ID: $EXISTING_ID"
            curl -sS -w "\nHTTP_STATUS:%{http_code}" -X DELETE \
              -H "Authorization: token $GITEA_TOKEN" \
              "$GITEA_API/repos/$REPO/releases/$EXISTING_ID"
          fi

          echo "Deleting old tag..."
          curl -sS -w "\nHTTP_STATUS:%{http_code}" -X DELETE \
            -H "Authorization: token $GITEA_TOKEN" \
            "$GITEA_API/repos/$REPO/tags/$TAG"

          echo "Creating new release..."
          RELEASE_RESPONSE=$(curl -sS -w "\nHTTP_STATUS:%{http_code}" -X POST \
            -H "Authorization: token $GITEA_TOKEN" \
            -H "Content-Type: application/json" \
            -d "{\"tag_name\": \"$TAG\", \"name\": \"Latest Build\", \"body\": \"Automated build from commit ${{ github.sha }}\", \"draft\": false, \"prerelease\": false}" \
            "$GITEA_API/repos/$REPO/releases")
          echo "Create release response: $RELEASE_RESPONSE"

          RELEASE_ID=$(echo "$RELEASE_RESPONSE" | grep -o '"id":[0-9]*' | head -1 | grep -o '[0-9]*')
          echo "Created release ID: $RELEASE_ID"

          echo "Uploading APK..."
          curl -sS -w "\nHTTP_STATUS:%{http_code}" -X POST \
            -H "Authorization: token $GITEA_TOKEN" \
            -F "attachment=@bluesky-custom.apk" \
            "$GITEA_API/repos/$REPO/releases/$RELEASE_ID/assets?name=bluesky-custom.apk"