SHA256
Provide Android API 35/37 and Xcode jobs, dependency advisory checks, source invariants, and checksum-verified tools. Actions lint and available Linux static checks pass; hosted CI and all Apple-platform builds still require authorized runners. The manual release workflow never publishes and uses only owner-supplied signing credentials.
40 lines
1.7 KiB
YAML
40 lines
1.7 KiB
YAML
name: iOS validation
|
|
on:
|
|
push:
|
|
pull_request:
|
|
workflow_dispatch:
|
|
permissions:
|
|
contents: read
|
|
concurrency:
|
|
group: ios-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
jobs:
|
|
simulator:
|
|
runs-on: macos-15
|
|
timeout-minutes: 35
|
|
steps:
|
|
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
|
|
- name: Install verified XcodeGen and generate project
|
|
run: |
|
|
bash scripts/install-xcodegen.sh "$RUNNER_TEMP/xcodegen"
|
|
"$RUNNER_TEMP/xcodegen/xcodegen/bin/xcodegen" generate --spec ios/project.yml
|
|
xcodebuild -version
|
|
- name: Portable URL policy tests and Swift syntax
|
|
run: |
|
|
swift test --package-path ios
|
|
swiftc -frontend -parse ios/Sources/*.swift ios/Tests/*.swift ios/UITests/*.swift
|
|
- name: Simulator build and XCTest (no production signing)
|
|
run: |
|
|
device=$(python3 scripts/select-simulator.py)
|
|
xcodebuild -project ios/Yuvomi.xcodeproj -scheme Yuvomi -destination "platform=iOS Simulator,id=$device" -derivedDataPath "$RUNNER_TEMP/DerivedData" -resultBundlePath "$RUNNER_TEMP/Simulator.xcresult" CODE_SIGNING_ALLOWED=NO test
|
|
- name: Unsigned device archive validation
|
|
run: xcodebuild -project ios/Yuvomi.xcodeproj -scheme Yuvomi -destination 'generic/platform=iOS' -archivePath "$RUNNER_TEMP/Yuvomi-unsigned.xcarchive" CODE_SIGNING_ALLOWED=NO archive
|
|
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
|
|
if: always()
|
|
with:
|
|
name: ios-unsigned-archive-and-test-results
|
|
path: |
|
|
${{ runner.temp }}/Simulator.xcresult
|
|
${{ runner.temp }}/Yuvomi-unsigned.xcarchive
|
|
retention-days: 14
|