playstore-internal.yml

name: Publish to Play Store Internal Track

on:
  workflow_dispatch:
  push:
    branches: [ 'release/**' ]

# Cancel any in-progress runs of this workflow if a new run is triggered within the same branch or PR
concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  build:
    runs-on: macos-latest # use [ self-hosted, macOS ] to host on our own mac mini, which is twice as fast and cheaper than hosting on a github runner. See README for more info.
    steps:
      - uses: actions/checkout@v4
      - name: Prepare Release
        uses: ./.github/actions/prepare-release

      # This will decode the keystore from base 64 text representation that we have stored in secrets
      # and generates a keystore file and gets stored in /android-app path
      - name: Decode Keystore
        env:
          ENCODED_STRING: ${{ secrets.KEYSTORE_BASE_64 }}
        shell: bash
        run: |
          echo $ENCODED_STRING > keystore-b64.txt
          base64 -d <keystore-b64.txt >upload-keystore.jks
      # The secrets.gradle file that is stored as text, does not need to be decoded
      # and can be directly written to a file
      # This file is used by the gradle build to sign the AAB
      - name: Create secrets.gradle
        run: echo "${{ secrets.SECRETS_GRADLE }}" > secrets.gradle

      - name: Build Prod Release Bundle
        run: ./gradlew bundleProdRelease --stacktrace

      - name: Upload Release Bundle to Artifacts
        uses: actions/upload-artifact@v4
        with:
          name: ${{ github.event.repository.name }}-${{ github.run_number }}-prod-release-bundle
          path: |
            ${{ github.workspace }}/app/build/outputs/bundle/prodRelease/app-prod-release.aab

      - name: Upload to Play Store Internal Track
        uses: r0adkll/upload-google-play@v1
        with:
          serviceAccountJsonPlainText: ${{ secrets.PLAYSTORE_SERVICE_ACCOUNT_JSON }}
          packageName: nl.q42.template
          releaseFiles: ${{ github.workspace }}/app/build/outputs/bundle/prodRelease/app-prod-release.aab
          track: internal
          status: completed
          inAppUpdatePriority: 2