aboutsummaryrefslogtreecommitdiffstats
path: root/.github/workflows
AgeCommit message (Collapse)AuthorFilesLines
16 hourschore: rename the repository to HardenedPassDanilo M.3-7/+7
The GitHub repository is now danixland/HardenedPass and the main repository on the personal server is HardenedPass. Point the reusable workflow references, the issue template, README and AGENTS.md at the new name; GitHub redirects the old URLs, but workflow `uses:` should not rely on that. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
22 hoursci: sign and publish HardenedPass releases with the fork's own keyDanilo M.1-106/+20
Add the fork's release keystore and its signing properties, encrypted with openssl (aes-256-cbc, pbkdf2) as secrets/keystore.cipher and secrets/props.cipher; the key is the ENCRYPT_KEY repository secret. The plaintext files and the master copy never enter the repository. Rewrite deploy_github_releases.yml for the single FOSS build: on a vX.Y.Z tag it decrypts the signing secrets, builds the signed release APK, removes the secrets, and creates a draft GitHub Release with HardenedPass_<tag>.apk and its SHA-256 checksum using gh, replacing the archived actions/create-release and upload-release-asset actions. AGENTS.md records the certificate fingerprint and the procedure. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
22 hoursbuild: drop the nonFree flavor, Sentry and Play ServicesDanilo M.2-6/+2
The fork targets GrapheneOS and ships only FOSS builds. The nonFree flavor added Sentry crash reporting, wired to upstream's Sentry project, and Play Services SMS one-time-code autofill, which needs Google's servers. Neither is wanted, so remove the flavor dimension entirely: - Delete app/src/nonFree, the SentryPlugin, the sentry-stub module, the Sentry and Play Services catalog entries, and the Sentry scope setup in Application. - Move the free AutofillSmsActivity stub into main; it keeps the SMS OTP feature off exactly as the free build did. A ponytail note marks the FillOtpFromSms paths for later removal. - SlimTests no longer needs to skip a nonFree variant. - Workflows and docs use :app:assembleDebug / :app:assembleRelease. A bare assembleRelease would also verify library modules in release mode, where ui:compose fails on a pre-existing AppCompat attribute reference the old flavored task never touched. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
26 hoursci: remove automated public suffix list updatesDanilo M.1-48/+0
The workflow committed through a bot PR on GitHub, which is only a push mirror of the main repository; bot commits there would diverge from it. Update the list by hand instead: ./gradlew updatePSL ./gradlew :autofill-parser:test -PslimTests Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
26 hoursci: run checks on push to master, schedule CodeQLDanilo M.3-91/+6
The check workflow only triggered on pull requests, so direct pushes to master were never built or tested. Trigger it on push to master as well and rename it to CI. Run CodeQL weekly instead of manual-only. Remove draft_new_release.yml, which is built around upstream's develop and release-X.Y branch model, and upstream's encrypted signing keystore and properties, which only upstream can decrypt. Release signing needs a keystore of our own before deploy_github_releases.yml can run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
26 hoursci: adapt workflows to the forkDanilo M.8-188/+11
Drop workflows tied to upstream infrastructure: library publishing to Maven Central, Crowdin sync, the Healthchecks shadow job and snapshot deploys signed with upstream keys. Point the remaining workflows at this fork's setup-gradle action on master instead of the archived upstream's develop branch, and target master for automated pull requests. draft_new_release.yml is left untouched for now. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2024-10-09chore(deps): update actions/upload-artifact action to v4.4.3 (#3256)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-08chore(deps): update actions/upload-artifact action to v4.4.2 (#3255)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07chore(deps): update github/codeql-action action to v3.26.12 (#3254)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07chore(deps): update actions/checkout action to v4.2.1 (#3253)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-07chore(deps): update actions/upload-artifact action to v4.4.1 (#3252)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-03chore(deps): update github/codeql-action action to v3.26.11 (#3247)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-30chore(deps): update github/codeql-action action to v3.26.10 (#3239)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-26chore(deps): update actions/checkout action to v4.2.0 (#3235)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-24chore(deps): update github/codeql-action action to v3.26.9 (#3234)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-23chore(deps): update crowdin/github-action digest to 95d6e89 (#3231)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19chore(deps): update github/codeql-action action to v3.26.8 (#3224)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-19chore(deps): update peter-evans/create-pull-request action to v7.0.5 (#3223)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-18chore(deps): update peter-evans/create-pull-request action to v7.0.4 (#3220)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-18chore(deps): update crowdin/github-action digest to 91d52b5 (#3217)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-16chore(deps): update peter-evans/create-pull-request action to v7.0.3 (#3213)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-13chore(deps): update github/codeql-action action to v3.26.7 (#3209)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-12chore(deps): update peter-evans/create-pull-request action to v7.0.2 (#3207)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-06chore(deps): update crowdin/github-action digest to cf0ccf9 (#3200)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-05chore(deps): update peter-evans/create-pull-request action to v7.0.1 (#3196)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-09-03chore(deps): update peter-evans/create-pull-request action to v7 (#3194)renovate[bot]2-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-31chore(deps): update actions/upload-artifact action to v4.4.0 (#3193)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-29chore(deps): update github/codeql-action action to v3.26.6 (#3190)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-24chore(deps): update github/codeql-action action to v3.26.5 (#3186)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-22chore(deps): update github/codeql-action action to v3.26.4 (#3183)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-19chore(deps): update github/codeql-action action to v3.26.3 (#3179)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-18chore(deps): pin crowdin/github-action action to 6ed209d (#3176)renovate[bot]1-1/+1
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-18fix(ci): update secretsHarsh Shandilya1-2/+2
2024-08-18fix: rework Crowdin integration (#3175)Harsh Shandilya1-24/+16
* chore: set up Crowdin configuration * fix(app): sync strings from Crowdin Closes #3174 * fix(ci): use crowdin/github-action instead of homebrew setup * fix(build): remove obsolete Crowdin plugin
2024-08-14chore(deps): update github/codeql-action action to v3.26.2 (#3169)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-14chore(deps): update github/codeql-action action to v3.26.1 (#3165)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-14feat(build): replace homebrew ktfmt formatter with SpotlessHarsh Shandilya1-1/+1
Spotless has fixed their Gradle Configuration Cache woes in the past couple months which gets rid of my primary complaint.
2024-08-06chore(deps): update github/codeql-action action to v3.26.0 (#3157)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-06chore(deps): update actions/upload-artifact action to v4.3.6 (#3156)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-02chore(deps): update actions/upload-artifact action to v4.3.5 (#3146)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-27chore(deps): update thomaseizinger/keep-a-changelog-new-release action to ↵renovate[bot]1-1/+1
v3.1.0 (#3138) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-26chore(deps): update github/codeql-action action to v3.25.15 (#3137)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-25chore(deps): update github/codeql-action action to v3.25.14 (#3134)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-19chore(deps): update github/codeql-action action to v3.25.13 (#3125)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-12chore(deps): update github/codeql-action action to v3.25.12 (#3119)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-05chore(deps): update actions/upload-artifact action to v4.3.4 (#3113)renovate[bot]2-9/+9
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-05chore(deps): update actions/download-artifact action to v4.1.8 (#3112)renovate[bot]1-3/+3
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-28chore(deps): update github/codeql-action action to v3.25.11 (#3105)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-18chore(deps): update peter-evans/create-pull-request action to v6.1.0 (#3099)renovate[bot]3-3/+3
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-13chore(deps): update github/codeql-action action to v3.25.10 (#3093)renovate[bot]1-2/+2
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>