feat: [EUDIW-162] First implementation of github action for deployment

.github/workflows/release.yml

@@ -0,0 +1,133 @@
+name: Build and Deploy
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  run-static-checks:
+    uses: ./statics.yml
+  bump-app-version:
+    needs: run-static-checks
+    runs-on: ubuntu-latest
+    environment: prod
+    outputs:
+      currentAppVersion: ${{ steps.github-release-creation.outputs.CURRENT_APP_VERSION }}
+    steps:
+      - id: checkout
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab #v3.5.2
+        with:
+          fetch-depth: 0
+          ssh-key: ${{ secrets.SSH_DEPLOY_KEY }}
+      - id: setup-node
+        uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
+        with:
+          node-version-file: '.node-version'
+      - id: yarn-cache
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
+        env:
+          cache-name: cache-node-modules
+        with:
+          # npm cache files are stored in `~/.npm` on Linux/macOS
+          path: ~/.npm
+          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/yarn.lock') }}
+      - id: install-packages
+        run: yarn install --frozen-lockfile
+      - id: bump-version
+        run: |
+          git config --local user.email "github-actions[bot]@users.noreply.github.com"
+          git config --local user.name "github-actions[bot]"
+          yarn start-fix-cycle
+      - id: push-tags
+        run: |
+          git push --no-verify --follow-tags origin HEAD:${GITHUB_REF#refs/heads/}
+      - id: github-release-creation
+        run: |
+          APP_VERSION=$(node -p -e "require('./package.json').version")
+          echo "CURRENT_APP_VERSION=$APP_VERSION" >> $GITHUB_OUTPUT
+          gh release create $APP_VERSION --latest --generate-notes
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  release-android:
+    needs: run-static-checks
+    environment: prod
+    runs-on: ubuntu-latest
+    steps:
+      - id: checkout
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        with:
+          fetch-depth: 0
+      - id: setup
+        uses: ./.github/actions/setup
+      - id: setup-jdk
+        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 #v3.11.0
+        with:
+          java-version: '11'
+          distribution: 'temurin'
+          cache: gradle
+      - id: setup-android-sdk
+        uses: android-actions/setup-android@7c5672355aaa8fde5f97a91aa9a99616d1ace6bc #v2.0.10
+      - id: setup-ruby
+        uses: ruby/setup-ruby@d2b39ad0b52eca07d23f3aa14fdf2a3fcc1f411c #v1.149.0
+        with:
+          bundler-cache: true
+      - id: build-release-android
+        run: |
+          ./scripts/android-release.sh ./android/app
+          cd android && bundle exec fastlane alpha
+        shell: bash
+        env:
+          RUBYOPT: '-rostruct'
+          ENCODED_IOAPP_JSON_KEY_FILE: ${{secrets.ENCODED_IOAPP_JSON_KEY_FILE}}
+          ENCODED_IO_APP_RELEASE_KEYSTORE: ${{secrets.ENCODED_IO_APP_RELEASE_KEYSTORE}}
+          IO_APP_RELEASE_STORE_FILE: ${{secrets.IO_APP_RELEASE_STORE_FILE}}
+          IO_APP_RELEASE_STORE_PASSWORD: ${{secrets.IO_APP_RELEASE_STORE_PASSWORD}}
+          IO_APP_RELEASE_KEY_ALIAS: ${{secrets.IO_APP_RELEASE_KEY_ALIAS}}
+          IO_APP_RELEASE_KEY_PASSWORD: ${{secrets.IO_APP_RELEASE_KEY_PASSWORD}}
+  release-ios:
+    needs: run-static-checks
+    environment: prod
+    runs-on: macos-14
+    steps:
+      - id: set-xcode-version
+        run: sudo xcode-select -s '/Applications/Xcode_15.4.app/Contents/Developer'
+        shell: bash
+      - id: checkout
+        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab #v3.5.2
+        with:
+          fetch-depth: 0
+      - id: setup
+        uses: ./.github/actions/setup
+      - id: setup-ruby
+        uses: ruby/setup-ruby@22fdc77bf4148f810455b226c90fb81b5cbc00a7 #v1.171.0
+        with:
+          bundler-cache: true
+      - id: prepare-ios-build
+        run: ./scripts/ios-release-build.sh
+        env:
+          APP_STORE_API_KEY_ID: ${{secrets.APP_STORE_API_KEY_ID}}
+          APP_STORE_API_PRIVATE_KEY: ${{secrets.APP_STORE_API_PRIVATE_KEY}}
+      - id: add-ssh-deploy-key
+        run: |
+          echo -e "Host github.com
+            AddKeysToAgent yes
+            IdentityFile ~/.ssh/id_ed25519" > ~/.ssh/config
+          echo -e "$SSH_DEPLOY_KEY" > ~/.ssh/id_ed25519
+          chmod 400 ~/.ssh/id_ed25519
+          ssh-add ~/.ssh/id_ed25519
+        env:
+          SSH_DEPLOY_KEY: ${{secrets.SSH_DEPLOY_KEY}}
+      - id: build-upload-app-store
+        name: Build & submit to App store
+        run: |
+          cd ios
+          bundle exec fastlane beta_circleci_testflight
+        env:
+          LC_ALL: en_US.UTF-8
+          LANG: en_US.UTF-8
+          APP_STORE_API_KEY_ID: ${{secrets.APP_STORE_API_KEY_ID}}
+          APP_STORE_API_PRIVATE_KEY: ${{secrets.APP_STORE_API_PRIVATE_KEY}}
+          APP_STORE_API_KEY_ISSUER_ID: ${{secrets.APP_STORE_API_KEY_ISSUER_ID}}
+          ITMSTRANSPORTER_FORCE_ITMS_PACKAGE_UPLOAD: ${{secrets.ITMSTRANSPORTER_FORCE_ITMS_PACKAGE_UPLOAD}}
+          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}

package.json

@@ -12,7 +12,11 @@
     "nuke": "rm -rf ios/Pods && rm -rf ios/DerivedData && cd android && ./gradlew clean && cd .. && rm -rf node_modules",
     "prepare": "husky",
     "tsc": "tsc --noEmit",
-    "prettier:check": "prettier --check \"ts/**/*.(ts|tsx)\""
+    "prettier:check": "prettier --check \"ts/**/*.(ts|tsx)\"",
+    "pre-cycle": "scripts/changelog/check_git_status.sh",
+    "start-fix-cycle": "yarn pre-cycle && standard-version -t \"\" --release-as patch --no-verify",
+    "start-release-cycle": "yarn pre-cycle && standard-version -t \"\"  --release-as minor --no-verify",
+    "start-breaking-cycle": "yarn pre-cycle && standard-version -t \"\" --release-as major --no-verify"
   },
   "lint-staged": {
     "*.{ts,tsx}": [
@@ -91,6 +95,7 @@
     "react-test-renderer": "18.3.1",
     "reactotron-react-native": "^5.1.10",
     "reactotron-redux": "^3.1.10",
+    "standard-version": "^9.5.0",
     "typescript": "5.0.4"
   },
   "engines": {

scripts/android-release.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+# Recreate JSON key file (for Google Play) from ENV variable
+echo $ENCODED_IOAPP_JSON_KEY_FILE | base64 --decode > /tmp/json-key.json
+
+# Recreate keystore from ENV variable
+echo $ENCODED_IO_APP_RELEASE_KEYSTORE | base64 --decode > /tmp/eudiw-release.keystore

scripts/changelog/check_git_status.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+if [[ $(git diff --stat) != '' ]]; then
+  echo -e "\033[1;31m Git directory is dirty! Please commit or stash your changes before a release!"
+  exit 1
+else
+  echo 'Git directory is clean!'
+fi

scripts/ios-release.sh

@@ -0,0 +1,7 @@
+#!/bin/bash
+
+cp .env.prod .env
+yarn postinstall
+# yarn cie-ios:ci
+touch ./ios/fastlane/AuthKey_$APP_STORE_API_KEY_ID.p8
+echo -e "$APP_STORE_API_PRIVATE_KEY" > ./ios/fastlane/AuthKey_$APP_STORE_API_KEY_ID.p8