ci: restore android release keystore from secrets and bump version to 1.0.13+13

.github/workflows/release.yml

@@ -133,6 +133,53 @@ jobs:
 
           Write-Host "google-services.json restored."
 
+      # ------------------------------------------------------------
+      # Android Release Keystore & Signing Configuration
+      # ------------------------------------------------------------
+      - name: Restore Android Release Keystore from Secret
+        env:
+          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
+        if: ${{ env.ANDROID_KEYSTORE_BASE64 != '' }}
+        working-directory: frontend/android/app
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+
+          $base64 = $env:ANDROID_KEYSTORE_BASE64.Trim()
+          $bytes = [Convert]::FromBase64String($base64)
+          [IO.File]::WriteAllBytes("$PWD/tis_rms_release.keystore", $bytes)
+
+          Write-Host "tis_rms_release.keystore successfully restored from secret."
+
+      - name: Configure Android key.properties
+        env:
+          KEY_STORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_STORE_PASSWORD }}
+          KEY_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_KEY_PASSWORD }}
+          KEY_ALIAS: ${{ secrets.ANDROID_KEYSTORE_KEY_ALIAS }}
+        working-directory: frontend/android
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+
+          $keystoreFile = "app/tis_rms_release.keystore"
+          if (Test-Path $keystoreFile) {
+            $storePass = if ($env:KEY_STORE_PASSWORD) { $env:KEY_STORE_PASSWORD } else { "android" }
+            $keyPass = if ($env:KEY_PASSWORD) { $env:KEY_PASSWORD } else { "android" }
+            $alias = if ($env:KEY_ALIAS) { $env:KEY_ALIAS } else { "androiddebugkey" }
+
+            $keyPropertiesContent = @"
+storePassword=$storePass
+keyPassword=$keyPass
+keyAlias=$alias
+storeFile=tis_rms_release.keystore
+"@
+            Set-Content -Path "key.properties" -Value $keyPropertiesContent -Encoding ascii
+            Write-Host "Android key.properties successfully created."
+          } else {
+            Write-Warning "Keystore file not found at $keystoreFile. Build will use debug signing."
+          }
+
+
       # ------------------------------------------------------------
       # Determine Release Tag & Version
       # ------------------------------------------------------------

frontend/android/.gitignore

@@ -12,3 +12,4 @@ GeneratedPluginRegistrant.java
 key.properties
 **/*.keystore
 **/*.jks
+KEYSTORE_BASE64.txt

frontend/android/key.properties.example

@@ -1,4 +1,4 @@
-storePassword=tis_rms_2026
-keyPassword=tis_rms_2026
-keyAlias=upload
-storeFile=upload-keystore.jks
+storePassword=android
+keyPassword=android
+keyAlias=androiddebugkey
+storeFile=tis_rms_release.keystore

frontend/pubspec.yaml

@@ -16,7 +16,7 @@ publish_to: 'none' # Remove this line if you wish to publish to pub.dev
 # https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Articles/CoreFoundationKeys.html
 # In Windows, build-name is used as the major, minor, and patch parts
 # of the product and file versions while build-number is used as the build suffix.
-version: 1.0.1+2
+version: 1.0.13+13
 
 environment:
   sdk: ^3.11.5