Merge pull request #62 from NatLibFi/update-pr-template #17
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ios-main | |
| # | |
| # This workflow is run on all commits pushed to main (i.e. merged PRs). | |
| # | |
| on: | |
| push: | |
| branches: [ main ] | |
| env: | |
| COMMIT_SHA: ${{ github.sha }} | |
| BRANCH_NAME: ${{ github.head_ref || github.ref_name }} | |
| TARGET_BRANCH_NAME: ${{ github.base_ref || github.ref_name }} | |
| # Join all secrets, so that they're "used", and will be masked in logs | |
| MASKED_SECRETS: ${{ join(secrets, '\n') }} | |
| jobs: | |
| build: | |
| runs-on: macOS-13 | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Checkout submodules | |
| run: git submodule update --init --recursive | |
| - name: Show build info | |
| env: | |
| TEST_SECRET: ${{ secrets.MASK_TEST }} | |
| run: scripts/show-ci-info.sh | |
| - name: SSH setup (for cloning ekirjasto-ios-keys through Fastlane match) | |
| uses: MrSquaare/[email protected] | |
| with: | |
| private-key-name: ekirjasto-ci-ed25519 | |
| private-key: ${{ secrets.SSH_PRIVATE_KEY }} | |
| host: github.com | |
| - name: Force Xcode 15 | |
| run: sudo xcode-select -switch /Applications/Xcode_15.0.1.app | |
| - name: Bootstrap (and reveal secrets) | |
| env: | |
| EKIRJASTO_FASTLANE_APP_STORE_CONNECT_API_KEY_JSON_BASE64: ${{ secrets.FASTLANE_APP_STORE_CONNECT_API_KEY_JSON }} | |
| EKIRJASTO_IOS_TRANSIFEX_TOKEN: ${{ secrets.TRANSIFEX_TOKEN }} | |
| EKIRJASTO_LIBLCP_DEPENDENCY_SECRET: ${{ secrets.LIBLCP_DEPENDENCY_SECRET }} | |
| # Carthage gets rate limited in GitHub Actions if unauthenticated | |
| # (they're all public repositories, so auth isn't otherwise necessary) | |
| GITHUB_ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: scripts/bootstrap.sh --overwrite-secrets | |
| - name: App version and build number consistency check | |
| run: scripts/version.sh --check | |
| - name: Upload and download Transifex localizations | |
| env: | |
| EKIRJASTO_IOS_TRANSIFEX_SECRET: ${{ secrets.TRANSIFEX_SECRET }} | |
| EKIRJASTO_IOS_TRANSIFEX_TOKEN: ${{ secrets.TRANSIFEX_TOKEN }} | |
| run: scripts/transifex.sh --append-tags=main | |
| - name: Build debug build | |
| env: | |
| MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }} | |
| run: scripts/build.sh debug | |
| - name: Run tests | |
| if: ${{ !cancelled() }} | |
| run: scripts/run-tests.sh | |
| - name: Run minimal release checks | |
| run: scripts/release-checks.sh --minimal | |
| - name: Build release build and upload to Testflight (config=production) | |
| env: | |
| MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }} | |
| run: scripts/build.sh release_upload config:production | |
| - name: Build release build and upload to Testflight (config=beta) | |
| env: | |
| MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }} | |
| run: scripts/build.sh release_upload config:beta | |
| - name: Build release build and upload to Testflight (config=dev) | |
| env: | |
| MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }} | |
| run: scripts/build.sh release_upload config:dev |