simpletest/who_need_help
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Record current Android release candidate

Browse Source
This commit is contained in:
SimpleTest 2026-08-03 16:43:04 +03:00
parent 4ca0baa8fd
commit 0aac86bda0
2 changed files with 27 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
android/play-store/release-checklist.md
View File

@ -22,12 +22,12 @@
## Build
- [ ] Build from the exact committed candidate with the validated Android
- [x] Build from the exact committed candidate with the validated Android
allow-list read from the production checkout’s single `.env`.
- [ ] Run `scripts/android-release-build.sh`.
- [ ] Verify source fingerprint, signing certificate, bundletool validation,
- [x] Run `scripts/android-release-build.sh`.
- [x] Verify source fingerprint, signing certificate, bundletool validation,
lint, package name, version code/name, target SDK, and production origin.
- [ ] Install the universal APK generated from the same AAB on the authorized
- [x] Install the release APK generated from the same source-bound build on the authorized
physical phone and run the release smoke test.
- [ ] Upload the source-bound AAB first to internal testing.

39
docs/google-play-release-candidate-2026-08-01.md → docs/google-play-release-candidate-2026-08-03.md
View File

@ -1,4 +1,4 @@
# Google Play release candidate — 2026-08-01
# Google Play release candidate — 2026-08-03
This document identifies the exact locally validated artifact intended for the
first Google Play upload. It contains no credentials or private signing-key
@ -6,15 +6,15 @@ material.
## Upload artifact
- File: `android/dist-release-20260801-final/who-need-help-release.aab`
- SHA-256: `55f05f4b7394be40f2740529eb8597279f9af25269b97c4f58fa4446b431bb14`
- File: `android/dist-release-20260803-current/who-need-help-release.aab`
- SHA-256: `14d0ad2d680edcb94a1434ed302e14a0ebe65873fbec5a5bddeff384c13e91e1`
- Package: `org.whoneedhelp.mobile`
- Version code: `1`
- Version name: `0.1.0`
- Minimum SDK: `24`
- Target SDK: `37`
- Source fingerprint:
`8339812414061c6090b91f0abfe3562633926b4e72159885f57e7bd4000d2555`
`8e8a5c9d2d6dcf64bc105a90cdf0b6ed3cfa36b08a354cafdf159f67ea21e00d`
The source fingerprint stored next to the artifact matched a fresh local
fingerprint after the build.
@ -34,22 +34,29 @@ App Links association.
## Validation evidence
- `bundletool` validation passed.
- Release unit tests and Android lint passed.
- Release unit tests and Android lint passed; the lint report contains no
errors or warnings.
- R8 release build completed successfully.
- APK and AAB signing verification passed.
- Universal APK generated from this AAB:
`android/dist-release-20260801-final/who-need-help-release-universal.apk`
`android/dist-release-20260803-current/who-need-help-release-universal.apk`
- Universal APK SHA-256:
`cf8bf8001b02447fb63ee73b3d8dd980485c38113cc7e0f67705690afa64f79c`
- The universal APK was installed on the authorised physical Android 16 / API
36 device and cold-started successfully.
- The production origin rendered correctly on the device.
- `https://whoneedhelp.com/safety` opened in the installed production app.
- No application crash or TLS/SSL/WebView load failure was observed in the
release smoke-test log.
- The complete repository quality run passed 414 tests plus compiler, format,
xref, Credo, Sobelow, Dialyzer, dependency audit, container, Compose, Helm,
migration, rollback, observability, and image-security gates.
`2d34eb24ad06bd0022ef5f711ffc5fa2c7325b5d092a521cc7f0f8cf093332eb`
- The release APK SHA-256 is
`73ff3579dd22197e20ab5882b4a98f858a9d59a6622bf80d3ddde48ae03bf931`.
- The release APK was installed over the existing production package on the
authorised physical Android 16 / API 36 device without deleting app data.
- A cold start completed in 614 ms and the production origin rendered on the
device.
- `https://whoneedhelp.com/safety` was delivered to
`org.whoneedhelp.mobile/.MainActivity` and rendered in the installed app.
- No application crash or TLS/SSL/WebView load failure was present in the
filtered release smoke-test log.
- The complete repository quality run passed 443 ExUnit tests and 14 browser
dependency tests, plus compiler, format, xref, Credo, Sobelow, Dialyzer,
dependency audit, container, Compose, Helm, migration, rollback,
observability, and image-security gates.
- The final runtime image scan reported zero detected vulnerabilities.
## First Play Console session