Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

ci: automate release artifacts and store uploads after release PR merge

Abierto
  • ¿Algo no está bien?
#276 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
5/5
Tiempo estimado
Más de una semana
Aptitud para principiantes
10/100
Tipo de issue
Nueva funcionalidad
Claridad
Bastante claro
Estado de actividad
Activo
Stack tecnológico
android, dart, flutter, github-actions, ios
Área
ci-cd, mobile, release

Línea de trabajo

Start with pubspec.yaml, CHANGELOG.md, docs/AUDIT.md and android/app/build.gradle.kts, which define the version, release notes, audit entry and Android signing. Then read the existing CI workflows that run the tests and builds checks. Done means a merged release PR validates its metadata and publishes the Windows ZIP, Android AAB and iOS IPA with protected secrets, while ordinary merges touch no release secrets. Credential setup, rotation and rerun steps belong in docs/RELEASING.md.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

enhancement P2-Medium

Goal

After a release PR merges into main, build distributable UNIUN artifacts, attach the Windows ZIP to a versioned GitHub Release, upload Android to Google Play, and upload iOS to TestFlight. The maintainer will review and submit the store updates for public release.

Release PR contract

  • A release PR updates pubspec.yaml (MAJOR.MINOR.PATCH+build), adds user-facing notes to CHANGELOG.md, and adds the release audit entry to docs/AUDIT.md without deleting earlier audit history.
  • Validate that the version is new, the build number exceeds the last store upload, and the changelog/audit entries match the version. Fail before any upload if validation fails.
  • Trigger publishing only for a merged release PR, not for ordinary merges, PR builds, or nightly builds. Require the tests and builds checks to pass before publishing.

Artifacts and uploads

  • Windows: build in Release mode on Windows, ZIP the complete runnable output directory, create tag v<version>, and attach the ZIP and checksums to a GitHub Release.
  • Android: build a Release AAB signed with the existing production upload key, then upload it to a configured Google Play track for maintainer review. Do not use the disposable key from PR build CI.
  • iOS: build and sign a Release IPA on macOS for both in.uniun.app and in.uniun.app.ShareExtension, then upload it to App Store Connect/TestFlight. The maintainer handles App Store submission after processing and review.
  • Fetch the real Git LFS model asset for distributable builds; the pointer-only checkout used by PR build CI must not be shipped.
  • Keep version, tag, release notes, and all three artifacts tied to the same merged commit. Make failed or partial uploads visible and safe to retry without silently incrementing or reusing a store build number.

Credentials and gates

  • Store the Android upload keystore/passwords, Google Play service account access, Apple Distribution certificate/profiles, and App Store Connect API key in protected GitHub environment secrets. Never write them to the repo or expose them in logs or PR jobs.
  • Limit Play permissions to the selected track. Confirm the target track before enabling upload; keep production rollout/manual submission with the maintainer.
  • Document credential setup, rotation, a manual rerun path, and what to do after a partial release in docs/RELEASING.md.
Google Play credentials
Needed How to get it
Existing Android upload keystore (.jks), alias, store password, and key password Use the upload key for the current Play listing; android/app/build.gradle.kts reads it through the gitignored android/key.properties. See docs/RELEASING.md.
Google Play service account JSON key In Google Cloud, enable the Google Play Developer API and create a service account. Invite its email in Play Console → Users and permissions with access to UNIUN, then create its JSON key for CI. Google setup guide.
Track permission Grant Release apps to testing tracks for a test track. Grant Release to production only if automated production submission is later chosen. Play permissions.
App Store / TestFlight credentials
Needed How to get it
App Store Connect API key (.p8), Key ID, and Issuer ID App Store Connect → Users and Access → Integrations → App Store Connect API → Team Keys → Generate. Use an App Manager role for managing the build. Download the .p8 once and store it securely. Apple API key guide.
Apple Distribution signing identity (.p12) and its password Export the existing distribution certificate with its private key from the Mac that holds it. Apple signing guidance.
Two App Store Connect provisioning profiles Create one for in.uniun.app and one for in.uniun.app.ShareExtension, matching the distribution certificate and configured capabilities. Download them from Apple Developer → Certificates, Identifiers & Profiles → Profiles. Apple profile guide.

Acceptance criteria

  • A non-release merge never accesses release secrets or uploads anything.
  • A release PR with failing checks or invalid version metadata cannot upload.
  • One merged release PR produces a working Windows ZIP/GitHub Release, a Play Console AAB ready for review, and an iOS build visible in TestFlight.
  • The maintainer can submit the store releases manually after checking the uploaded builds.
Lenguaje dominante
Dart
Estrellas
2
Forks
2
Merge medio
1 d 35 min
PR fusionados (30 d)
36

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de basictech01/uniun

Todos los issues de basictech01/uniun

Issues similares

Más issues de Dart

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.