ci: avoid unsigned release builds

Author: Jaydatt Khodave

.github/workflows/android-auto-release.yml

@@ -14,6 +14,9 @@ concurrency:
   group: android-auto-release
   cancel-in-progress: false
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   auto-release:
     name: Build signed AAB and create release
@@ -122,6 +125,10 @@ jobs:
           KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
+          ORG_GRADLE_PROJECT_KEYSTORE_FILE: ${{ github.workspace }}/release-keystore.jks
+          ORG_GRADLE_PROJECT_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          ORG_GRADLE_PROJECT_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
+          ORG_GRADLE_PROJECT_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
         run: |
           ./gradlew --no-daemon clean bundleRelease assembleRelease
 

.github/workflows/android-release.yml

@@ -6,6 +6,9 @@ on:
 permissions:
   contents: write
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   build-release-aab:
     name: Build signed release AAB
@@ -80,6 +83,10 @@ jobs:
 
       - name: Build signed release AAB
         env:
+          ORG_GRADLE_PROJECT_KEYSTORE_FILE: ${{ env.KEYSTORE_FILE }}
+          ORG_GRADLE_PROJECT_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          ORG_GRADLE_PROJECT_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
+          ORG_GRADLE_PROJECT_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
           KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}

.github/workflows/android.yml

@@ -5,6 +5,9 @@ on:
   pull_request:
   workflow_dispatch:
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -29,16 +32,11 @@ jobs:
         uses: gradle/actions/setup-gradle@v4.4.1
 
       - name: Build with gradle
-        run: ./gradlew clean assemble
+        run: ./gradlew clean :app:assembleDebug
 
       - name: Upload debug apks
         uses: actions/upload-artifact@v4.6.2
         with:
           name: app-debug
           path: app/build/outputs/apk/debug
 
-      - name: Upload release apks
-        uses: actions/upload-artifact@v4.6.2
-        with:
-          name: app-release
-          path: app/build/outputs/apk/release

app/build.gradle.kts

@@ -5,6 +5,10 @@ plugins {
     alias(libs.plugins.kotlin.compose)
 }
 
+fun signingValue(name: String): String? {
+    return providers.gradleProperty(name).orNull ?: System.getenv(name)
+}
+
 android {
     namespace = "com.itisuniqueofficial.lockify"
     compileSdk = 36
@@ -21,13 +25,13 @@ android {
 
     signingConfigs {
         create("release") {
-            val keystorePath = System.getenv("KEYSTORE_FILE")
+            val keystorePath = signingValue("KEYSTORE_FILE")
             if (!keystorePath.isNullOrBlank()) {
                 storeFile = file(keystorePath)
             }
-            storePassword = System.getenv("KEYSTORE_PASSWORD")
-            keyAlias = System.getenv("KEY_ALIAS")
-            keyPassword = System.getenv("KEY_PASSWORD")
+            storePassword = signingValue("KEYSTORE_PASSWORD")
+            keyAlias = signingValue("KEY_ALIAS")
+            keyPassword = signingValue("KEY_PASSWORD")
         }
     }