name: Maintainer unsigned release build (never publishes)
on:
  workflow_dispatch:
permissions:
  contents: read
jobs:
  android:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    steps:
      - uses: https://github.com/actions/checkout@11d5960a326750d5838078e36cf38b85af677262
        env:
          GIT_DEFAULT_HASH: sha256
        with:
          persist-credentials: false
      - run: bash scripts/check-ci-runner.sh android
      - uses: https://github.com/actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3
        with:
          distribution: temurin
          java-version: '17'
      - uses: https://github.com/android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407
        with:
          packages: 'platform-tools platforms;android-37.0 build-tools;36.0.0'
          log-accepted-android-sdk-licenses: false
      - run: bash android/gradlew -p android testDebugUnitTest lintRelease assembleRelease bundleRelease
      # Gitea ignores GitHub environment approval gates: never load signing keys here.
      - uses: https://gitea.com/actions/upload-artifact@c6a3b2bd78b3985e4b2f15397fec357f0fd808de
        with:
          name: maintainer-android-release-builds
          path: |
            android/app/build/outputs/apk/release/*.apk
            android/app/build/outputs/bundle/release/*.aab
          retention-days: 7