magpie/.github/workflows/ci.yml at main · munzzyy/magpie · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
name: ci
on:
  push:
    branches: [main, master]
  pull_request:

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: 24
      - name: unit tests
        run: npm test
      - name: i18n catalog complete
        run: node tools/extract-strings.mjs
      - name: clean check
        run: bash tools/check-clean.sh
      - name: e2e in chromium
        run: |
          sudo apt-get update -q
          sudo apt-get install -qy chromium-browser
          sudo ln -sf "$(command -v chromium-browser)" /usr/local/bin/chromium
          npm run e2e

  android:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v4
        with:
          distribution: temurin
          java-version: 17
      - name: build debug apk
        run: cd android && ./gradlew --no-daemon assembleRelease
      - name: assert zero permissions
        run: |
          AAPT=$(ls "$ANDROID_HOME"/build-tools/*/aapt2 | tail -1)
          out=$("$AAPT" dump permissions android/app/build/outputs/apk/release/app-release-unsigned.apk)
          echo "$out"
          if echo "$out" | grep -E "uses-permission" | grep -v "DYNAMIC_RECEIVER_NOT_EXPORTED"; then
            echo "unexpected permission crept into the manifest"; exit 1
          fi

  ios:
    runs-on: macos-15
    steps:
      - uses: actions/checkout@v4
      - name: generate the xcode project
        run: |
          brew install xcodegen
          cd ios && xcodegen generate
      - name: build for the simulator
        run: |
          cd ios && xcodebuild -project Magpie.xcodeproj -target Magpie \
            -configuration Release -sdk iphonesimulator \
            CODE_SIGNING_ALLOWED=NO SYMROOT="$PWD/build" build
      - name: assert no permission prompts
        run: |
          plist=ios/build/Release-iphonesimulator/Magpie.app/Info.plist
          out=$(plutil -p "$plist")
          echo "$out"
          if echo "$out" | grep -E "UsageDescription|NSAppTransportSecurity"; then
            echo "a permission prompt or ATS exception crept into the manifest"; exit 1
          fi