mirror of
https://github.com/stablyai/orca.git
synced 2026-11-13 17:37:40 +00:00
* feat(mobile): sign Android release builds with a dedicated release key Add an Expo config plugin that gives the generated app/build.gradle an env-driven release signing config, and have the Android release workflow require the keystore secrets, fail before building when they are missing, and check the APK's signing certificate against a pinned fingerprint. * fix(mobile): keep the signing setup hint intact in the workflow error * test(mobile): type the plugin import without a cast * feat(mobile): keep debug signing until release signing is enabled Release signing now turns on when the ORCA_ANDROID_RELEASE_CERT_SHA256 (or ORCA_ANDROID_REQUIRE_RELEASE_SIGNING) repository variable is set. Until then the workflow keeps today's debug-signed build and adds a warning and job summary note; once enabled, missing secrets fail. * feat(mobile): enable v2 and v3 APK signing for the release key