release: split the Play key write, guard the tag and attach the mapping

- write the Play service account in its own step so fastlane never has
  the secret in its environment (only the 0600 file path)
- fail the build when the tag does not match versionName
- serialize releases with a concurrency group
- attach the R8 mapping.txt to the GitHub release
This commit is contained in:
austinried
2026-10-08 19:21:26 +00:00
parent 9d43b6d104
commit 4bea164906
2 changed files with 20 additions and 3 deletions
+1 -1
View File
@@ -18,7 +18,7 @@ The APK and the AAB are signed with the release key. Certificate SHA-256:
02da2cb7b8214e53bdbfb455698dcb965222f91c954b5210aeac96fe329c8f01
```
Each release attaches the APK, the AAB, the checksums and the certificate (committed here as [`release-certificate.pem`](release-certificate.pem)):
Each release attaches the APK, the AAB, the checksums, the certificate (committed here as [`release-certificate.pem`](release-certificate.pem)) and the R8 `mapping.txt`:
```sh
sha256sum -c SHA256SUMS