Neil fc67787090 feat(mobile): sign Android release builds with a dedicated release key (#38924) ...

* feat(mobile): sign Android release builds with a dedicated release key

Add an Expo config plugin that gives the generated app/build.gradle an
env-driven release signing config, and have the Android release workflow
require the keystore secrets, fail before building when they are missing,
and check the APK's signing certificate against a pinned fingerprint.

* fix(mobile): keep the signing setup hint intact in the workflow error

* test(mobile): type the plugin import without a cast

* feat(mobile): keep debug signing until release signing is enabled

Release signing now turns on when the ORCA_ANDROID_RELEASE_CERT_SHA256
(or ORCA_ANDROID_REQUIRE_RELEASE_SIGNING) repository variable is set.
Until then the workflow keeps today's debug-signed build and adds a
warning and job summary note; once enabled, missing secrets fail.

* feat(mobile): enable v2 and v3 APK signing for the release key

2026-11-06 14:33:18 -08:00

..

actions

refactor(tooling): organize remaining scripts by domain owners (#38407)

2026-11-05 00:29:16 -08:00

ISSUE_TEMPLATE

chore: ask issue reporters to write in English (#12066)

2026-08-01 23:28:10 -07:00

scripts

ci: bound every job in pull-request workflows with timeout-minutes (#28784)

2026-11-05 19:59:47 -08:00

workflows

feat(mobile): sign Android release builds with a dedicated release key (#38924)

2026-11-06 14:33:18 -08:00

CODEOWNERS

[comment audit] Finish launcher and configuration comment review (#33513)

2026-10-25 04:20:32 -07:00

CONTRIBUTING.md

refactor(tooling): organize build, CI, and test owners (#38130)

2026-11-04 21:08:19 -08:00

dependabot.yml

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

pull_request_template.md

docs(agents): default to no new tests and tighten the anti-pattern list (#37993)

2026-11-04 02:05:26 +00:00