chore: upload builds to bucket

.github/workflows/release-android-base.yaml

@@ -1,6 +1,7 @@
 name: release-android-base
 
 permissions:
+  id-token: write
   contents: read
 
 on:
@@ -18,6 +19,10 @@ on:
         description: 'Release type of the project (debug/internal/production)'
         default: 'internal'
         type: string
+      project-type:
+        description: 'Type of project (wallet/dapp)'
+        required: true
+        type: string
       output-path:
         description: 'Path to get the APK file'
         required: true
@@ -45,6 +50,13 @@ on:
         required: true
       google-services-file:
         required: false
+      aws-account-id:
+        required: true
+      slack-webhook-url:
+        required: true
+      firebase-url:
+        description: 'Firebase URL of the project'
+        required: false
 
 jobs:
   build:
@@ -90,16 +102,18 @@ jobs:
           echo "org.gradle.caching=true" >> ${{ inputs.root-path }}/android/gradle.properties
 
       - name: Cache Gradle
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: |
             ~/.gradle/caches
             ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+            ${{ inputs.root-path }}/android/.gradle
+          key: ${{ runner.os }}-gradle-${{ inputs.name }}-${{ hashFiles(format('{0}/android/**/*.gradle*', inputs.root-path), format('{0}/android/**/gradle-wrapper.properties', inputs.root-path)) }}
           restore-keys: |
-            ${{ runner.os }}-gradle-
+            ${{ runner.os }}-gradle-${{ inputs.name }}-
 
       - name: Build APK
+        id: build
         run: |
           if [ ${{ inputs.release-type }} = 'internal' ]; then
             cd ${{ inputs.root-path }} && yarn install && yarn run android:build:internal
@@ -113,9 +127,80 @@ jobs:
           tools-version: 13.0.1
           gcp_sa_key: ${{ secrets.gsa-key }}
 
-      - name: Upload APK
+      - name: Upload APK to Firebase
+        id: firebase-upload
+        continue-on-error: false
         env:
           APP_ID: ${{ secrets.firebase-app-id }}
         run: |
-          firebase appdistribution:distribute ${{ inputs.output-path }} --app $APP_ID --release-notes "${{ inputs.name }} ${{ inputs.release-type }} release" --groups "flutter-team, javascript-team, kotlin-team, unity, rust-team, swift-team, wc-testers"
-
+          firebase appdistribution:distribute ${{ inputs.output-path }} \
+            --app $APP_ID \
+            --release-notes "${{ inputs.name }} (${{ inputs.project-type }}) - ${{ inputs.release-type }} - Branch: ${{ github.ref_name }}" \
+            --groups "flutter-team, javascript-team, kotlin-team, unity, rust-team, swift-team, wc-testers"
+
+      - name: Configure AWS credentials
+        id: aws-creds
+        continue-on-error: true
+        uses: aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8
+        with:
+          role-to-assume: arn:aws:iam::${{ secrets.aws-account-id }}:role/prod-github-actions-react-native-builds
+          aws-region: eu-central-1
+          output-env-credentials: false
+          output-credentials: true
+
+      - name: Upload Android build to S3
+        id: s3-upload
+        env:
+          AWS_REGION: eu-central-1
+          AWS_ACCESS_KEY_ID: ${{ steps.aws-creds.outputs.aws-access-key-id }}
+          AWS_SECRET_ACCESS_KEY: ${{ steps.aws-creds.outputs.aws-secret-access-key }}
+          AWS_SESSION_TOKEN: ${{ steps.aws-creds.outputs.aws-session-token }}
+        continue-on-error: true
+        run: |
+          aws s3 cp \
+            ${{ inputs.output-path }} \
+            s3://walletconnect.react-native-builds.prod/android/${{ inputs.release-type }}/${{ inputs.project-type }}-${{ inputs.release-type }}.apk
+
+      - name: Send Slack notification
+        if: always() && !cancelled()
+        uses: slackapi/[email protected]
+        with:
+          webhook: ${{ secrets.slack-webhook-url }}
+          webhook-type: incoming-webhook
+          payload: |
+            {
+              "text": "Android Build Report - ${{ inputs.name }} - ${{ inputs.release-type }}",
+              "blocks": [
+                {
+                  "type": "header",
+                  "text": { "type": "plain_text", "text": "🤖 Android Build Report" }
+                },
+                {
+                  "type": "section",
+                  "fields": [
+                    { "type": "mrkdwn", "text": "*Project:*\n`${{ inputs.name }}`" },
+                    { "type": "mrkdwn", "text": "*Release Type:*\n`${{ inputs.release-type }}`" },
+                    { "type": "mrkdwn", "text": "*Branch:*\n`${{ github.ref_name }}`" }
+                  ]
+                },
+                {
+                  "type": "section",
+                  "fields": [
+                    { "type": "mrkdwn", "text": "*Build:*\n`${{ steps.build.outcome == 'success' && '✅ Success' || '❌ Failed' }}`" },
+                    { "type": "mrkdwn", "text": "*Firebase Upload:*\n`${{ steps.firebase-upload.outcome == 'success' && '✅ Success' || steps.firebase-upload.outcome == 'failure' && '❌ Failed' || '⏭️ Skipped' }}`" },
+                    { "type": "mrkdwn", "text": "*S3 Upload:*\n`${{ steps.s3-upload.outcome == 'success' && '✅ Success' || steps.s3-upload.outcome == 'failure' && '❌ Failed' || '⏭️ Skipped' }}`" },
+                    { "type": "mrkdwn", "text": "*Overall Status:*\n`${{ job.status == 'success' && '✅ Success' || '❌ Failed' }}`" }
+                  ]
+                },
+                {
+                  "type": "actions",
+                  "elements": [
+                    {
+                      "type": "button",
+                      "text": { "type": "plain_text", "text": "View Workflow Run" },
+                      "url": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+                    }${{ steps.build.outcome == 'success' && steps.firebase-upload.outcome == 'success' && secrets.firebase-url != '' && format(',{{"type":"button","text":{{"type":"plain_text","text":"View in Firebase"}},"url":"{0}"}}', secrets.firebase-url) || '' }}
+                  ]
+                }
+              ]
+            }

.github/workflows/release-dapp-android-internal.yaml

@@ -1,6 +1,7 @@
 name: release-android-appkit-internal
 
 permissions:
+  id-token: write
   contents: read
 
 on: workflow_dispatch
@@ -12,6 +13,7 @@ jobs:
       name: AppKit React Native
       root-path: 'dapps/W3MWagmi'
       release-type: 'internal'
+      project-type: 'dapp'
       output-path: 'dapps/W3MWagmi/android/app/build/outputs/apk/internal/app-internal.apk'
     secrets:
       project-id: ${{ secrets.ENV_PROJECT_ID }}
@@ -23,3 +25,6 @@ jobs:
       gsa-key: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_KEY }}
       keystore-name: ${{ secrets.WC_INTERNAL_KEYSTORE_NAME }}
       keystore: ${{ secrets.WC_INTERNAL_KEYSTORE }}
+      aws-account-id: ${{ secrets.AWS_ACCOUNT_ID }}
+      slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
+      firebase-url: ${{ secrets.FIREBASE_APPKIT_INTERNAL_URL }}

.github/workflows/release-dapp-android-production.yaml

@@ -1,6 +1,7 @@
 name: release-android-appkit-production
 
 permissions:
+  id-token: write
   contents: read
 
 on: workflow_dispatch
@@ -12,6 +13,7 @@ jobs:
       name: AppKit React Native
       root-path: 'dapps/W3MWagmi'
       release-type: 'production'
+      project-type: 'dapp'
       output-path: 'dapps/W3MWagmi/android/app/build/outputs/apk/release/app-release.apk'
     secrets:
       project-id: ${{ secrets.ENV_PROJECT_ID }}
@@ -23,3 +25,6 @@ jobs:
       gsa-key: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_KEY }}
       keystore-name: ${{ vars.WC_PROD_KEYSTORE_NAME }}
       keystore: ${{ secrets.WC_PROD_KEYSTORE }}
+      aws-account-id: ${{ secrets.AWS_ACCOUNT_ID }}
+      slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
+      firebase-url: ${{ secrets.FIREBASE_APPKIT_PROD_URL }}

.github/workflows/release-dapp-ios-internal.yaml

@@ -1,9 +1,17 @@
 name: release-ios-appkit-internal
 
 permissions:
+  id-token: write
   contents: read
 
-on: workflow_dispatch
+on: 
+  workflow_dispatch:
+    inputs:
+      build-for-simulator:
+        description: "Build for simulator instead of TestFlight"
+        required: false
+        default: false
+        type: boolean
 
 jobs:
   release-internal:
@@ -17,6 +25,8 @@ jobs:
       scheme-name: 'W3MWagmi Internal'
       bundle-id: 'com.walletconnect.web3modal.rnsample.internal'
       apple-id: '6479817037'
+      project-type: 'dapp'
+      build-for-simulator: ${{ inputs.build-for-simulator }}
     secrets:
       project-id: ${{ secrets.ENV_PROJECT_ID }}
       relay-url: ${{ secrets.ENV_RELAY_URL }}
@@ -30,4 +40,7 @@ jobs:
       match-keychain-password: ${{ secrets.MATCH_KEYCHAIN_PASSWORD }}
       match-git-url: ${{ secrets.MATCH_GIT_URL }}
       match-ssh-key: ${{ secrets.MATCH_SSH_KEY }}
+      aws-account-id: ${{ secrets.AWS_ACCOUNT_ID }}
+      slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
+      testflight-url: ${{ secrets.TESTFLIGHT_APPKIT_INTERNAL_URL }}
 

.github/workflows/release-dapp-ios-production.yaml

@@ -1,9 +1,17 @@
 name: release-ios-appkit-production
 
 permissions:
+  id-token: write
   contents: read
 
-on: workflow_dispatch
+on: 
+  workflow_dispatch:
+    inputs:
+      build-for-simulator:
+        description: "Build for simulator instead of TestFlight"
+        required: false
+        default: false
+        type: boolean
 
 jobs:
   release-production:
@@ -17,6 +25,8 @@ jobs:
       scheme-name: 'W3MWagmi'
       bundle-id: 'com.walletconnect.web3modal.rnsample'
       apple-id: '6446700301'
+      project-type: 'dapp'
+      build-for-simulator: ${{ inputs.build-for-simulator }}
     secrets:
       project-id: ${{ secrets.ENV_PROJECT_ID }}
       relay-url: ${{ secrets.ENV_RELAY_URL }}
@@ -30,4 +40,7 @@ jobs:
       match-keychain-password: ${{ secrets.MATCH_KEYCHAIN_PASSWORD }}
       match-git-url: ${{ secrets.MATCH_GIT_URL }}
       match-ssh-key: ${{ secrets.MATCH_SSH_KEY }}
+      aws-account-id: ${{ secrets.AWS_ACCOUNT_ID }}
+      slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
+      testflight-url: ${{ secrets.TESTFLIGHT_APPKIT_PROD_URL }}