This repository was archived by the owner on Feb 24, 2025. It is now read-only.
iOS - Build Hotfix Release #3
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: iOS - Build Hotfix Release | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| asana-task-url: | |
| description: "Asana release task URL" | |
| required: true | |
| type: string | |
| base-branch: | |
| description: "Base branch (defaults to main, only override for testing)" | |
| required: false | |
| type: string | |
| current-internal-release-branch: | |
| description: "Current internal release branch (to merge hotfix branch to - hotfix branch is merged to main if this is not provided)" | |
| required: false | |
| type: string | |
| jobs: | |
| assert_release_branch: | |
| name: Assert Hotfix Branch | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Assert hotfix release branch | |
| run: | | |
| case "${{ github.ref }}" in | |
| refs/heads/hotfix/*) ;; | |
| *) echo "👎 Not a hotfix release branch"; exit 1 ;; | |
| esac | |
| run_tests: | |
| name: Run Tests | |
| needs: assert_release_branch | |
| uses: ./.github/workflows/ios-pr-checks.yml | |
| with: | |
| skip-release: true | |
| secrets: | |
| APPLE_API_KEY_BASE64: ${{ secrets.APPLE_API_KEY_BASE64 }} | |
| APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }} | |
| APPLE_API_KEY_ISSUER: ${{ secrets.APPLE_API_KEY_ISSUER }} | |
| ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }} | |
| MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }} | |
| SSH_PRIVATE_KEY_FASTLANE_MATCH: ${{ secrets.SSH_PRIVATE_KEY_FASTLANE_MATCH }} | |
| update_asana: | |
| name: Update Asana tasks | |
| needs: run_tests | |
| runs-on: macos-14-xlarge | |
| timeout-minutes: 10 | |
| steps: | |
| - name: Check out the code | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 # Fetch all history and tags in order to extract Asana task URLs from git log | |
| ref: ${{ github.ref_name }} | |
| submodules: recursive | |
| - name: Set up fastlane | |
| run: bundle install | |
| - name: Extract Asana Task ID | |
| id: task-id | |
| run: bundle exec fastlane run asana_extract_task_id task_url:"${{ github.event.inputs.asana-task-url }}" | |
| - name: Update Asana for the release | |
| id: update-asana | |
| continue-on-error: true | |
| env: | |
| ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }} | |
| GITHUB_TOKEN: ${{ github.token }} | |
| BRANCH: ${{ github.ref_name }} | |
| run: | | |
| bundle exec fastlane run update_asana_for_release \ | |
| platform:ios \ | |
| release_type:internal \ | |
| github_handle:"${{ github.actor }}" \ | |
| is_scheduled_release:"${{ github.event_name == 'schedule' }}" \ | |
| release_task_id:"${{ steps.task-id.outputs.asana_task_id }}" \ | |
| target_section_id:"${{ vars.IOS_APP_BOARD_VALIDATION_SECTION_ID }}" | |
| prepare_release: | |
| name: Prepare Release | |
| needs: run_tests | |
| uses: ./.github/workflows/ios-release.yml | |
| with: | |
| asana-task-url: ${{ github.event.inputs.asana-task-url }} | |
| destination: appstore | |
| secrets: | |
| APPLE_API_KEY_BASE64: ${{ secrets.APPLE_API_KEY_BASE64 }} | |
| APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }} | |
| APPLE_API_KEY_ISSUER: ${{ secrets.APPLE_API_KEY_ISSUER }} | |
| ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }} | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }} | |
| MM_WEBHOOK_URL: ${{ secrets.MM_WEBHOOK_URL }} | |
| SSH_PRIVATE_KEY_FASTLANE_MATCH: ${{ secrets.SSH_PRIVATE_KEY_FASTLANE_MATCH }} | |
| tag_and_merge: | |
| name: Tag and Merge Branch | |
| needs: [ prepare_release, update_asana ] | |
| uses: ./.github/workflows/ios-tag-release-update-asana.yml | |
| with: | |
| asana-task-url: ${{ github.event.inputs.asana-task-url }} | |
| branch: ${{ github.ref_name }} | |
| base-branch: ${{ github.event.inputs.current-internal-release-branch || 'main' }} | |
| release-type: internal # Pre-release for now, after submitting to app store we will run ios-tag-release-update-asana again manually with 'hotfix' release type to finish up | |
| secrets: | |
| ASANA_ACCESS_TOKEN: ${{ secrets.ASANA_ACCESS_TOKEN }} | |
| GHA_ELEVATED_PERMISSIONS_TOKEN: ${{ secrets.GHA_ELEVATED_PERMISSIONS_TOKEN }} |