Commit keystore to repo for consistent APK signing across all CI builds

Simplifies signing: the keystore is stored in the repo so every release workflow run uses the same certificate. This fixes "App not installed" when updating via GitHub releases. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Fix keystore base64 decode in CI (use printf + ignore-garbage)
2026-02-28 23:36:10 +01:00 · 2026-02-28 23:33:22 +01:00 · 2026-02-28 23:28:39 +01:00
3 changed files with 26 additions and 3 deletions
@@ -30,7 +30,7 @@ jobs:
          key: gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: gradle-

-      - name: Build debug APK
+      - name: Build signed APK
        run: ./gradlew assembleDebug --no-daemon

      - name: Rename APK with version tag
@@ -11,8 +11,21 @@ android {
        applicationId = "com.pixel10.ai"
        minSdk = 31
        targetSdk = 35
-        versionCode = 7
-        versionName = "1.7.0"
+        versionCode = 8
+        versionName = "1.8.0"
+    }
+
+    val keystoreFile = rootProject.file("pixel10.keystore")
+
+    signingConfigs {
+        create("release") {
+            if (keystoreFile.exists()) {
+                storeFile = keystoreFile
+                storePassword = "pixel10ai"
+                keyAlias = "pixel10"
+                keyPassword = "pixel10ai"
+            }
+        }
    }

    buildTypes {
@@ -22,6 +35,16 @@ android {
                getDefaultProguardFile("proguard-android-optimize.txt"),
                "proguard-rules.pro"
            )
+            val releaseSigning = signingConfigs.getByName("release")
+            if (releaseSigning.storeFile != null) {
+                signingConfig = releaseSigning
+            }
+        }
+        debug {
+            val releaseSigning = signingConfigs.getByName("release")
+            if (releaseSigning.storeFile != null) {
+                signingConfig = releaseSigning
+            }
        }
    }