AN + KMP nightly builds, refactor to reusable composite actions

[matejsemancik]

Intro

This PR refactors GitHub Actions workflows by introducing 6 reusable composite actions for Android and KMP projects, eliminating code duplication and improving maintainability. The changes consolidate common CI/CD patterns into modular components, enhance caching mechanisms, and add two new nightly build
workflows for automated Android and cross-platform KMP deployments.

Key Features

• New Composite Actions: Created 6 reusable actions for Android/KMP workflows:
  • android-setup-environment - Java, Gradle, and Ruby setup
  • android-check - Lint checks and unit tests with Danger integration
  • android-build-firebase - Enterprise builds with Firebase App Distribution
  • android-build-googlePlay - Release builds for Google Play Store
  • android-generate-baseline-profiles - Automated baseline profile generation
  • ios-kmp-build - iOS/KMP builds with TestFlight upload
  • kmp-detect-changes - Platform-specific change detection
• New Nightly Build Workflows:
  • android-cloud-nightly-build.yml - Automated Android enterprise builds with changelog generation
  • kmp-combined-nightly-build.yml - Automated nightly builds for both iOS and Android with with changelog generation
• Workflow Modernization: Refactored 7 existing workflows to use composite actions, reducing code duplication by ~75%
• Enhanced Caching for changelog action: Improved cache key generation with workflow and branch-specific keys for better cache hit rates

Breaking Changes

This guide outlines the necessary changes for existing users integrating with the updated Android workflows.

Summary of Changes

Firebase App Distribution Workflow

• ✅ Change: BUNDLE_GRADLE_TASK → PACKAGE_GRADLE_TASK
• ❌ Remove: SIGNING_KEYSTORE_PATH input
• ❌ Remove: All signing secrets (SIGNING_KEYSTORE_PASSWORD, SIGNING_KEY_ALIAS, SIGNING_KEY_PASSWORD)

Google Play Workflow

• ❌ Remove: SIGNING_KEYSTORE_PATH input (was unused)
• ✅ Keep: All signing secrets (still required)

Detailed guides

Firebase App Distribution Workflow Changes

Required Input Changes

1. Rename BUNDLE_GRADLE_TASK to PACKAGE_GRADLE_TASK

Before:

uses: futuredapp/.github/.github/workflows/android-cloud-release-firebaseAppDistribution.yml@main
with:
  BUNDLE_GRADLE_TASK: "bundleEnterprise"

After:

uses: futuredapp/.github/.github/workflows/android-cloud-release-firebaseAppDistribution.yml@main
with:
  PACKAGE_GRADLE_TASK: "packageEnterpriseUniversalApk"

Note: The new task should be a Gradle task for packaging universal APK (e.g., packageEnterpriseUniversalApk or packageDevEnterpriseUniversalApk) instead of a bundle task. This packaging task is a built-in task in Android Gradle Plugin (AGP) and should match the build variant and flavor you want to build.

2. Remove SIGNING_KEYSTORE_PATH Input

Before:

uses: futuredapp/.github/.github/workflows/android-cloud-release-firebaseAppDistribution.yml@main
with:
  SIGNING_KEYSTORE_PATH: "keystore/debug.jks"
  # other inputs...

After:

uses: futuredapp/.github/.github/workflows/android-cloud-release-firebaseAppDistribution.yml@main
with:
  # SIGNING_KEYSTORE_PATH removed
  # other inputs...

Required Secret Changes

Remove All Signing Secrets

The following secrets are no longer required and should be removed from your workflow calls:

Remove these secrets:

• SIGNING_KEYSTORE_PASSWORD
• SIGNING_KEY_ALIAS
• SIGNING_KEY_PASSWORD

Before:

secrets:
  SIGNING_KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
  SIGNING_KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
  SIGNING_KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
  APP_DISTRIBUTION_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT }}

After:

secrets:
  APP_DISTRIBUTION_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT }}

Complete Migration Example

Before:

jobs:
  deploy-firebase:
    uses: futuredapp/.github/.github/workflows/android-cloud-release-firebaseAppDistribution.yml@main
    with:
      TEST_GRADLE_TASKS: "testReleaseUnitTest"
      BUNDLE_GRADLE_TASK: "bundleEnterprise"
      UPLOAD_GRADLE_TASK: "appDistributionUploadEnterprise"
      SIGNING_KEYSTORE_PATH: "keystore/release.jks"
      APP_DISTRIBUTION_GROUPS: "qa-team,beta-testers"
    secrets:
      SIGNING_KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
      SIGNING_KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
      SIGNING_KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
      APP_DISTRIBUTION_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT }}

After:

jobs:
  deploy-firebase:
    uses: futuredapp/.github/.github/workflows/android-cloud-release-firebaseAppDistribution.yml@main
    with:
      TEST_GRADLE_TASKS: "testReleaseUnitTest"
      PACKAGE_GRADLE_TASK: "packageEnterpriseUniversalApk"
      UPLOAD_GRADLE_TASK: "appDistributionUploadEnterprise"
      APP_DISTRIBUTION_GROUPS: "qa-team,beta-testers"
    secrets:
      APP_DISTRIBUTION_SERVICE_ACCOUNT: ${{ secrets.FIREBASE_SERVICE_ACCOUNT }}

Google Play Workflow Changes

Required Input Changes

Remove SIGNING_KEYSTORE_PATH Input

Before:

uses: futuredapp/.github/.github/workflows/android-cloud-release-googlePlay.yml@main
with:
  SIGNING_KEYSTORE_PATH: "keystore/release.jks"
  # other inputs...

After:

uses: futuredapp/.github/.github/workflows/android-cloud-release-googlePlay.yml@main
with:
  # SIGNING_KEYSTORE_PATH removed
  # other inputs...

Complete Migration Example

Before:

jobs:
  deploy-google-play:
    uses: futuredapp/.github/.github/workflows/android-cloud-release-googlePlay.yml@main
    with:
      VERSION_NAME: "1.0.0"
      BUNDLE_GRADLE_TASK: "bundleRelease"
      SIGNING_KEYSTORE_PATH: "keystore/release.jks"
      GOOGLE_PLAY_APPLICATION_ID: "com.example.app"
      GOOGLE_PLAY_WHATSNEW_DIRECTORY: "distribution/whatsnew"
    secrets:
      SIGNING_KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
      SIGNING_KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
      SIGNING_KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
      GOOGLE_PLAY_PUBLISH_SERVICE_ACCOUNT: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT }}

After:

jobs:
  deploy-google-play:
    uses: futuredapp/.github/.github/workflows/android-cloud-release-googlePlay.yml@main
    with:
      VERSION_NAME: "1.0.0"
      BUNDLE_GRADLE_TASK: "bundleRelease"
      GOOGLE_PLAY_APPLICATION_ID: "com.example.app"
      GOOGLE_PLAY_WHATSNEW_DIRECTORY: "distribution/whatsnew"
    secrets:
      SIGNING_KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
      SIGNING_KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
      SIGNING_KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
      GOOGLE_PLAY_PUBLISH_SERVICE_ACCOUNT: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT }}

Technical Background

Firebase App Distribution Changes

The underlying logic no longer uses bundletool to create and sign universal APKs. Instead, the workflow now uses the built-in Android Gradle Plugin task for packaging universal APKs, which eliminates the need for external keystore handling and signing configuration.

Google Play Changes

The SIGNING_KEYSTORE_PATH input was unused and has been removed for consistency and clarity.