From 0aac86bda0de438cfa89e69d0f38979406a6a817 Mon Sep 17 00:00:00 2001 From: SimpleTest Date: Mon, 3 Aug 2026 16:43:04 +0300 Subject: [PATCH] Record current Android release candidate --- android/play-store/release-checklist.md | 8 ++-- ...ogle-play-release-candidate-2026-08-03.md} | 39 +++++++++++-------- 2 files changed, 27 insertions(+), 20 deletions(-) rename docs/{google-play-release-candidate-2026-08-01.md => google-play-release-candidate-2026-08-03.md} (61%) diff --git a/android/play-store/release-checklist.md b/android/play-store/release-checklist.md index 002a30f..c9514df 100644 --- a/android/play-store/release-checklist.md +++ b/android/play-store/release-checklist.md @@ -22,12 +22,12 @@ ## Build -- [ ] Build from the exact committed candidate with the validated Android +- [x] Build from the exact committed candidate with the validated Android allow-list read from the production checkout’s single `.env`. -- [ ] Run `scripts/android-release-build.sh`. -- [ ] Verify source fingerprint, signing certificate, bundletool validation, +- [x] Run `scripts/android-release-build.sh`. +- [x] Verify source fingerprint, signing certificate, bundletool validation, lint, package name, version code/name, target SDK, and production origin. -- [ ] Install the universal APK generated from the same AAB on the authorized +- [x] Install the release APK generated from the same source-bound build on the authorized physical phone and run the release smoke test. - [ ] Upload the source-bound AAB first to internal testing. diff --git a/docs/google-play-release-candidate-2026-08-01.md b/docs/google-play-release-candidate-2026-08-03.md similarity index 61% rename from docs/google-play-release-candidate-2026-08-01.md rename to docs/google-play-release-candidate-2026-08-03.md index 5ffaa63..ea77a21 100644 --- a/docs/google-play-release-candidate-2026-08-01.md +++ b/docs/google-play-release-candidate-2026-08-03.md @@ -1,4 +1,4 @@ -# Google Play release candidate — 2026-08-01 +# Google Play release candidate — 2026-08-03 This document identifies the exact locally validated artifact intended for the first Google Play upload. It contains no credentials or private signing-key @@ -6,15 +6,15 @@ material. ## Upload artifact -- File: `android/dist-release-20260801-final/who-need-help-release.aab` -- SHA-256: `55f05f4b7394be40f2740529eb8597279f9af25269b97c4f58fa4446b431bb14` +- File: `android/dist-release-20260803-current/who-need-help-release.aab` +- SHA-256: `14d0ad2d680edcb94a1434ed302e14a0ebe65873fbec5a5bddeff384c13e91e1` - Package: `org.whoneedhelp.mobile` - Version code: `1` - Version name: `0.1.0` - Minimum SDK: `24` - Target SDK: `37` - Source fingerprint: - `8339812414061c6090b91f0abfe3562633926b4e72159885f57e7bd4000d2555` + `8e8a5c9d2d6dcf64bc105a90cdf0b6ed3cfa36b08a354cafdf159f67ea21e00d` The source fingerprint stored next to the artifact matched a fresh local fingerprint after the build. @@ -34,22 +34,29 @@ App Links association. ## Validation evidence - `bundletool` validation passed. -- Release unit tests and Android lint passed. +- Release unit tests and Android lint passed; the lint report contains no + errors or warnings. - R8 release build completed successfully. - APK and AAB signing verification passed. - Universal APK generated from this AAB: - `android/dist-release-20260801-final/who-need-help-release-universal.apk` + `android/dist-release-20260803-current/who-need-help-release-universal.apk` - Universal APK SHA-256: - `cf8bf8001b02447fb63ee73b3d8dd980485c38113cc7e0f67705690afa64f79c` -- The universal APK was installed on the authorised physical Android 16 / API - 36 device and cold-started successfully. -- The production origin rendered correctly on the device. -- `https://whoneedhelp.com/safety` opened in the installed production app. -- No application crash or TLS/SSL/WebView load failure was observed in the - release smoke-test log. -- The complete repository quality run passed 414 tests plus compiler, format, - xref, Credo, Sobelow, Dialyzer, dependency audit, container, Compose, Helm, - migration, rollback, observability, and image-security gates. + `2d34eb24ad06bd0022ef5f711ffc5fa2c7325b5d092a521cc7f0f8cf093332eb` +- The release APK SHA-256 is + `73ff3579dd22197e20ab5882b4a98f858a9d59a6622bf80d3ddde48ae03bf931`. +- The release APK was installed over the existing production package on the + authorised physical Android 16 / API 36 device without deleting app data. +- A cold start completed in 614 ms and the production origin rendered on the + device. +- `https://whoneedhelp.com/safety` was delivered to + `org.whoneedhelp.mobile/.MainActivity` and rendered in the installed app. +- No application crash or TLS/SSL/WebView load failure was present in the + filtered release smoke-test log. +- The complete repository quality run passed 443 ExUnit tests and 14 browser + dependency tests, plus compiler, format, xref, Credo, Sobelow, Dialyzer, + dependency audit, container, Compose, Helm, migration, rollback, + observability, and image-security gates. +- The final runtime image scan reported zero detected vulnerabilities. ## First Play Console session