Release Parent 4.11.0 (68)

.github/workflows/build-app.yml

@@ -16,7 +16,9 @@ on:
         required: true
         type: string
     secrets:
-      ACCESS_TOKEN:
+      GH_APP_ID:
+        required: true
+      GH_APP_PRIVATE_KEY:
         required: true
       ANDROID_RELEASE_KEYSTORE_B64:
         required: true
@@ -30,12 +32,21 @@ jobs:
     name: ${{ inputs.app-type-lower }}-build
     runs-on: ubuntu-latest
     steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: canvas-android,android-vault
+
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
           submodules: 'recursive'
           fetch-depth: 1
-          token: ${{ secrets.ACCESS_TOKEN }}
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Set up JDK 17
         uses: actions/setup-java@v4

.github/workflows/create-tag.yml

@@ -0,0 +1,99 @@
+name: Create Tag
+
+on:
+  push:
+    branches:
+      - 'release/student'
+      - 'release/teacher'
+      - 'release/parent'
+
+jobs:
+  create-tag:
+    name: create-tag
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    env:
+      JIRA_USERNAME: ${{ secrets.JIRA_USERNAME }}
+      JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: canvas-android,android-vault
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18'
+
+      - name: Determine app from branch
+        id: app-info
+        run: |
+          APP_NAME=$(echo "${GITHUB_REF_NAME}" | sed 's|release/||')
+          echo "app-name=${APP_NAME}" >> "$GITHUB_OUTPUT"
+
+          VERSION_CODE=$(grep 'versionCode' apps/${APP_NAME}/build.gradle | head -1 | awk '{print $NF}')
+          VERSION_NAME=$(grep 'versionName' apps/${APP_NAME}/build.gradle | head -1 | awk '{print $NF}')
+          VERSION_NAME=${VERSION_NAME//\"/}
+          VERSION_NAME=${VERSION_NAME//\'/}
+
+          TAG="${APP_NAME}-${VERSION_NAME}-${VERSION_CODE}"
+          echo "version-code=${VERSION_CODE}" >> "$GITHUB_OUTPUT"
+          echo "version-name=${VERSION_NAME}" >> "$GITHUB_OUTPUT"
+          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
+
+          echo "App: ${APP_NAME}"
+          echo "Version: ${VERSION_NAME} (${VERSION_CODE})"
+          echo "Tag: ${TAG}"
+
+      - name: Configure git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Create and push tag
+        id: create-tag
+        run: |
+          TAG="${{ steps.app-info.outputs.tag }}"
+          if git rev-parse "$TAG" >/dev/null 2>&1; then
+            echo "Tag $TAG already exists, skipping tag creation"
+            echo "tag-exists=true" >> "$GITHUB_OUTPUT"
+          else
+            git tag "$TAG"
+            git push origin "$TAG"
+            echo "tag-exists=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Create GitHub Release
+        if: steps.create-tag.outputs.tag-exists != 'true'
+        env:
+          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+        run: |
+          APP_NAME="${{ steps.app-info.outputs.app-name }}"
+          VERSION_NAME="${{ steps.app-info.outputs.version-name }}"
+          VERSION_CODE="${{ steps.app-info.outputs.version-code }}"
+          TAG="${{ steps.app-info.outputs.tag }}"
+
+          gh release create "$TAG" \
+            --title "${APP_NAME} ${VERSION_NAME} (${VERSION_CODE})" \
+            --notes "${APP_NAME} ${VERSION_NAME} (${VERSION_CODE})" \
+            --draft
+
+      - name: Update JIRA fix versions
+        if: steps.create-tag.outputs.tag-exists != 'true' && env.JIRA_USERNAME != ''
+        run: |
+          cd scripts
+          npm install jira-client@4.0.1
+          node update-jira-issues.js "${{ steps.app-info.outputs.tag }}"

.github/workflows/deploy-parent.yml

@@ -0,0 +1,79 @@
+name: Deploy Parent
+
+on:
+  push:
+    tags:
+      - 'parent-*'
+
+concurrency:
+  group: deploy-parent
+  cancel-in-progress: false
+
+jobs:
+  build-and-deploy:
+    name: build-and-deploy
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: canvas-android,android-vault
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: 'recursive'
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+        with:
+          gradle-version: wrapper
+          java-version: '17'
+
+      - name: Decode release keystore
+        env:
+          KEYSTORE_B64: ${{ secrets.ANDROID_RELEASE_KEYSTORE_B64 }}
+        run: |
+          echo "$KEYSTORE_B64" | base64 --decode > release.jks
+          chmod 600 release.jks
+
+      - name: Build production release
+        run: |
+          ./gradle/gradlew -p apps \
+            :parent:assembleProdRelease \
+            :parent:bundleProdRelease \
+            --stacktrace \
+            --build-cache \
+            --parallel \
+            --max-workers=4 \
+            --no-daemon \
+            -Dorg.gradle.jvmargs="-Xmx6g -XX:+HeapDumpOnOutOfMemoryError" \
+            -Dkotlin.compiler.execution.strategy=in-process \
+            -Pandroid.injected.signing.store.file=$(pwd)/release.jks \
+            -Pandroid.injected.signing.store.password="${KEYSTORE_PASSWORD}" \
+            -Pandroid.injected.signing.key.alias="${KEYSTORE_KEY_ALIAS}" \
+            -Pandroid.injected.signing.key.password="${KEYSTORE_KEY_PASSWORD}"
+        env:
+          GRADLE_OPTS: "-Djava.net.preferIPv4Stack=true"
+          KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          KEYSTORE_KEY_ALIAS: ${{ secrets.ANDROID_KEYSTORE_ALIAS }}
+          KEYSTORE_KEY_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD }}
+
+      - name: Upload to Google Play
+        uses: r0adkll/upload-google-play@v1
+        with:
+          serviceAccountJsonPlainText: ${{ secrets.GPLAY_SERVICE_ACCOUNT_KEY }}
+          packageName: com.instructure.parentapp
+          releaseFiles: apps/parent/build/outputs/bundle/prodRelease/parent-prod-release.aab
+          track: internal
+          status: completed
+
+      - name: Cleanup sensitive files
+        if: always()
+        run: rm -f release.jks

.github/workflows/deploy-student.yml

@@ -0,0 +1,86 @@
+name: Deploy Student
+
+on:
+  push:
+    tags:
+      - 'student-*'
+
+concurrency:
+  group: deploy-student
+  cancel-in-progress: false
+
+jobs:
+  build-and-deploy:
+    name: build-and-deploy
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: canvas-android,android-vault
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: 'recursive'
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+        with:
+          gradle-version: wrapper
+          java-version: '17'
+
+      - name: Decode release keystore
+        env:
+          KEYSTORE_B64: ${{ secrets.ANDROID_RELEASE_KEYSTORE_B64 }}
+        run: |
+          echo "$KEYSTORE_B64" | base64 --decode > release.jks
+          chmod 600 release.jks
+
+      - name: Build production release
+        run: |
+          ./gradle/gradlew -p apps \
+            :student:assembleProdRelease \
+            :student:bundleProdRelease \
+            --stacktrace \
+            --build-cache \
+            --parallel \
+            --max-workers=4 \
+            --no-daemon \
+            -Dorg.gradle.jvmargs="-Xmx6g -XX:+HeapDumpOnOutOfMemoryError" \
+            -Dkotlin.compiler.execution.strategy=in-process \
+            -Pandroid.injected.signing.store.file=$(pwd)/release.jks \
+            -Pandroid.injected.signing.store.password="${KEYSTORE_PASSWORD}" \
+            -Pandroid.injected.signing.key.alias="${KEYSTORE_KEY_ALIAS}" \
+            -Pandroid.injected.signing.key.password="${KEYSTORE_KEY_PASSWORD}"
+        env:
+          GRADLE_OPTS: "-Djava.net.preferIPv4Stack=true"
+          KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          KEYSTORE_KEY_ALIAS: ${{ secrets.ANDROID_KEYSTORE_ALIAS }}
+          KEYSTORE_KEY_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD }}
+
+      - name: Extract update priority
+        id: priority
+        run: |
+          UPDATE_PRIORITY=$(grep 'updatePriority' apps/student/build.gradle | head -1 | awk '{print $NF}')
+          echo "value=${UPDATE_PRIORITY}" >> "$GITHUB_OUTPUT"
+
+      - name: Upload to Google Play
+        uses: r0adkll/upload-google-play@v1
+        with:
+          serviceAccountJsonPlainText: ${{ secrets.GPLAY_SERVICE_ACCOUNT_KEY }}
+          packageName: com.instructure.candroid
+          releaseFiles: apps/student/build/outputs/bundle/prodRelease/student-prod-release.aab
+          track: internal
+          inAppUpdatePriority: ${{ steps.priority.outputs.value }}
+          status: completed
+
+      - name: Cleanup sensitive files
+        if: always()
+        run: rm -f release.jks

.github/workflows/deploy-teacher.yml

@@ -0,0 +1,86 @@
+name: Deploy Teacher
+
+on:
+  push:
+    tags:
+      - 'teacher-*'
+
+concurrency:
+  group: deploy-teacher
+  cancel-in-progress: false
+
+jobs:
+  build-and-deploy:
+    name: build-and-deploy
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: canvas-android,android-vault
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: 'recursive'
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@v4
+        with:
+          gradle-version: wrapper
+          java-version: '17'
+
+      - name: Decode release keystore
+        env:
+          KEYSTORE_B64: ${{ secrets.ANDROID_RELEASE_KEYSTORE_B64 }}
+        run: |
+          echo "$KEYSTORE_B64" | base64 --decode > release.jks
+          chmod 600 release.jks
+
+      - name: Build production release
+        run: |
+          ./gradle/gradlew -p apps \
+            :teacher:assembleProdRelease \
+            :teacher:bundleProdRelease \
+            --stacktrace \
+            --build-cache \
+            --parallel \
+            --max-workers=4 \
+            --no-daemon \
+            -Dorg.gradle.jvmargs="-Xmx6g -XX:+HeapDumpOnOutOfMemoryError" \
+            -Dkotlin.compiler.execution.strategy=in-process \
+            -Pandroid.injected.signing.store.file=$(pwd)/release.jks \
+            -Pandroid.injected.signing.store.password="${KEYSTORE_PASSWORD}" \
+            -Pandroid.injected.signing.key.alias="${KEYSTORE_KEY_ALIAS}" \
+            -Pandroid.injected.signing.key.password="${KEYSTORE_KEY_PASSWORD}"
+        env:
+          GRADLE_OPTS: "-Djava.net.preferIPv4Stack=true"
+          KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          KEYSTORE_KEY_ALIAS: ${{ secrets.ANDROID_KEYSTORE_ALIAS }}
+          KEYSTORE_KEY_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PRIVATE_KEY_PASSWORD }}
+
+      - name: Extract update priority
+        id: priority
+        run: |
+          UPDATE_PRIORITY=$(grep 'updatePriority' apps/teacher/build.gradle | head -1 | awk '{print $NF}')
+          echo "value=${UPDATE_PRIORITY}" >> "$GITHUB_OUTPUT"
+
+      - name: Upload to Google Play
+        uses: r0adkll/upload-google-play@v1
+        with:
+          serviceAccountJsonPlainText: ${{ secrets.GPLAY_SERVICE_ACCOUNT_KEY }}
+          packageName: com.instructure.teacher
+          releaseFiles: apps/teacher/build/outputs/bundle/prodRelease/teacher-prod-release.aab
+          track: internal
+          inAppUpdatePriority: ${{ steps.priority.outputs.value }}
+          status: completed
+
+      - name: Cleanup sensitive files
+        if: always()
+        run: rm -f release.jks