Publish signed android build to GooglePlay Console (#1728)

* [CI] add first draft to publish to playconsole from Github Actions

* fix melos command for building the playconsole binary

* try fix release binary location and log output directory

* add cupertino icons to fix warning

* try fix build location

* [CI] properly setup google play console upload

* setup code signing for android release builds

* rename workflow

* fix keystore path

* polish android release workflow

* don't sign f-droid builds

* try forcing f-droid flavors to not sign

* try fixing signing

* Revert "try fixing signing"

This reverts commit a2a0f64.

* try fixing signing

* add `noSign` signing config

* fix `noSign` signing config

* avoid null error for unused signing config

* remove redundant android_build.yml, and add some documentation

* remove empty.keystore approach - it is not needed after all

Author: clangenb

.github/workflows/android_build.yml

@@ -0,0 +1,64 @@
+name: Android Build and Deploy
+
+on:
+  push:
+    branches: [ master, beta ]
+    tags:
+      - "*"
+  pull_request:
+    branches: [ master, beta ]
+
+# Cancel a currently running workflow from the same PR, branch or tag when a new workflow is
+# triggered (ref https://stackoverflow.com/a/72408109)
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Keystore
+        env:
+          KEYSTORE_BASE64: ${{ secrets.GOOGLE_PLAY_KEYSTORE_BASE64 }}
+        run: |
+          echo "$KEYSTORE_BASE64" | base64 --decode > app/android/app/my-release-key.jks
+
+      - name: Create key.properties
+        # Keystore has only one key, hence the storePassword and the keyPassword are the same.
+        run: |
+          cat <<EOF > app/android/key.properties
+          storePassword=${{ secrets.GOOGLE_PLAY_KEYSTORE_PASSWORD }}
+          keyPassword=${{ secrets.GOOGLE_PLAY_KEYSTORE_PASSWORD }}
+          keyAlias=${{ secrets.GOOGLE_PLAY_KEY_ALIAS }}
+          storeFile=my-release-key.jks
+          EOF
+
+      - name: Install flutter wrapper
+        run: ./scripts/install_flutter_wrapper.sh
+
+      - name: Get dependencies (i.e., melos)
+        run: .flutter/bin/dart pub get
+
+      - name: Melos Bootstrap
+        run: .flutter/bin/dart run melos bootstrap
+
+      - name: Build Android AppBundle
+        run: |
+          .flutter/bin/dart run melos build-appbundle-play
+          echo "Check release files"
+          ls app/build/app/outputs/bundle/playRelease
+
+      - name: Deploy to Google Play (Beta)
+        # Only deploy if we are on beta
+        if: github.ref == 'refs/heads/beta'
+        uses: r0adkll/upload-google-play@v1
+        with:
+          serviceAccountJsonPlainText: ${{ secrets.GOOGLE_PLAY_JSON }}
+          packageName: org.encointer.wallet
+          releaseFiles: app/build/app/outputs/bundle/playRelease/app-play-release.aab
+          track: beta  # Publish to the beta track

.github/workflows/android_build_and_deploy.yml

@@ -17,9 +17,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      # Setup Environment
       - uses: actions/checkout@v4
 
+      # The following steps are executed with those scripts, as this is how we build
+      # the app in the f-droid pipeline too.
       - name: Check fdroid setup
         run: ./scripts/fdroid_init.sh
 

.github/workflows/fdroid.yml

@@ -12,6 +12,12 @@ if (localPropertiesFile.exists()) {
     }
 }
 
+def keystoreProperties = new Properties()
+def keystorePropertiesFile = rootProject.file("key.properties")
+if (keystorePropertiesFile.exists()) {
+    keystoreProperties.load(new FileInputStream(keystorePropertiesFile))
+}
+
 def flutterVersionCode = localProperties.getProperty('flutter.versionCode')
 if (flutterVersionCode == null) {
     flutterVersionCode = '1'
@@ -59,18 +65,22 @@ android {
         versionName flutterVersionName
     }
 
+    signingConfigs {
+        play {
+            keyAlias keystoreProperties['keyAlias']
+            keyPassword keystoreProperties['keyPassword']
+            // Avoid null error if file doesn't exist, as gradle evaluates the statements even
+            // if the signing config is not used.
+            storeFile keystoreProperties['storeFile'] ? file(keystoreProperties['storeFile']) : null
+            storePassword keystoreProperties['storePassword']
+        }
+    }
+
     buildTypes {
         release {
-            // AppCenter will take care of signing, so the bundle may not be signed here.
-            // uncomment the following line if you need to sign locally and provide all
-            // credentials and jsk file path in ../key.properties
-            // also uncomment the signing config referenced
-            //signingConfig signingConfigs.release
-
-            // To run `flutter run --release` locally, uncomment the following line
-            //signingConfig signingConfigs.debug
-
             minifyEnabled true
+            shrinkResources true
+            debuggable false
             proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
         }
     }
@@ -79,7 +89,6 @@ android {
     productFlavors {
         dev {
             dimension "deploy"
-            signingConfig signingConfigs.debug
             versionNameSuffix "-dev"
         }
         fdroid {
@@ -89,7 +98,7 @@ android {
         }
         play {
             dimension "deploy"
-            //signingConfig signingConfigs.release
+            signingConfig signingConfigs.play
             versionNameSuffix ""
         }
     }

app/android/app/build.gradle

@@ -305,6 +305,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "1.0.0"
+  cupertino_icons:
+    dependency: "direct main"
+    description:
+      name: cupertino_icons
+      sha256: ba631d1c7f7bef6b729a622b7b752645a2d076dba9976925b8f25725a30e1ee6
+      url: "https://pub.dev"
+    source: hosted
+    version: "1.0.8"
   dart_geohash:
     dependency: "direct main"
     description:

app/pubspec.lock

@@ -25,6 +25,7 @@ environment:
 dependencies:
   collection: ^1.18.0
   convert: ^3.1.1
+  cupertino_icons: ^1.0.8
   latlong2: ^0.9.0
   # intl - format numbers
   intl: ^0.18.1

app/pubspec.yaml

@@ -111,8 +111,8 @@ scripts:
     run: cd app && flutter build apk --split-per-abi --flavor dev
     description: "Build an APK file"
 
-  build-appbundle-release:
-    run: cd app && flutter build appbundle --release
+  build-appbundle-play:
+    run: cd app && flutter build appbundle --release --flavor play
     description: "Build an appbundle file ready to be submitted to the google play console"
 
   build-ipa-release: