Record current Android release candidate

This commit is contained in:
SimpleTest 2026-08-03 16:43:04 +03:00
parent 4ca0baa8fd
commit 0aac86bda0
2 changed files with 27 additions and 20 deletions

View File

@ -22,12 +22,12 @@
## Build ## Build
- [ ] Build from the exact committed candidate with the validated Android - [x] Build from the exact committed candidate with the validated Android
allow-list read from the production checkout’s single `.env`. allow-list read from the production checkout’s single `.env`.
- [ ] Run `scripts/android-release-build.sh`. - [x] Run `scripts/android-release-build.sh`.
- [ ] Verify source fingerprint, signing certificate, bundletool validation, - [x] Verify source fingerprint, signing certificate, bundletool validation,
lint, package name, version code/name, target SDK, and production origin. lint, package name, version code/name, target SDK, and production origin.
- [ ] Install the universal APK generated from the same AAB on the authorized - [x] Install the release APK generated from the same source-bound build on the authorized
physical phone and run the release smoke test. physical phone and run the release smoke test.
- [ ] Upload the source-bound AAB first to internal testing. - [ ] Upload the source-bound AAB first to internal testing.

View File

@ -1,4 +1,4 @@
# Google Play release candidate — 2026-08-01 # Google Play release candidate — 2026-08-03
This document identifies the exact locally validated artifact intended for the This document identifies the exact locally validated artifact intended for the
first Google Play upload. It contains no credentials or private signing-key first Google Play upload. It contains no credentials or private signing-key
@ -6,15 +6,15 @@ material.
## Upload artifact ## Upload artifact
- File: `android/dist-release-20260801-final/who-need-help-release.aab` - File: `android/dist-release-20260803-current/who-need-help-release.aab`
- SHA-256: `55f05f4b7394be40f2740529eb8597279f9af25269b97c4f58fa4446b431bb14` - SHA-256: `14d0ad2d680edcb94a1434ed302e14a0ebe65873fbec5a5bddeff384c13e91e1`
- Package: `org.whoneedhelp.mobile` - Package: `org.whoneedhelp.mobile`
- Version code: `1` - Version code: `1`
- Version name: `0.1.0` - Version name: `0.1.0`
- Minimum SDK: `24` - Minimum SDK: `24`
- Target SDK: `37` - Target SDK: `37`
- Source fingerprint: - Source fingerprint:
`8339812414061c6090b91f0abfe3562633926b4e72159885f57e7bd4000d2555` `8e8a5c9d2d6dcf64bc105a90cdf0b6ed3cfa36b08a354cafdf159f67ea21e00d`
The source fingerprint stored next to the artifact matched a fresh local The source fingerprint stored next to the artifact matched a fresh local
fingerprint after the build. fingerprint after the build.
@ -34,22 +34,29 @@ App Links association.
## Validation evidence ## Validation evidence
- `bundletool` validation passed. - `bundletool` validation passed.
- Release unit tests and Android lint passed. - Release unit tests and Android lint passed; the lint report contains no
errors or warnings.
- R8 release build completed successfully. - R8 release build completed successfully.
- APK and AAB signing verification passed. - APK and AAB signing verification passed.
- Universal APK generated from this AAB: - Universal APK generated from this AAB:
`android/dist-release-20260801-final/who-need-help-release-universal.apk` `android/dist-release-20260803-current/who-need-help-release-universal.apk`
- Universal APK SHA-256: - Universal APK SHA-256:
`cf8bf8001b02447fb63ee73b3d8dd980485c38113cc7e0f67705690afa64f79c` `2d34eb24ad06bd0022ef5f711ffc5fa2c7325b5d092a521cc7f0f8cf093332eb`
- The universal APK was installed on the authorised physical Android 16 / API - The release APK SHA-256 is
36 device and cold-started successfully. `73ff3579dd22197e20ab5882b4a98f858a9d59a6622bf80d3ddde48ae03bf931`.
- The production origin rendered correctly on the device. - The release APK was installed over the existing production package on the
- `https://whoneedhelp.com/safety` opened in the installed production app. authorised physical Android 16 / API 36 device without deleting app data.
- No application crash or TLS/SSL/WebView load failure was observed in the - A cold start completed in 614 ms and the production origin rendered on the
release smoke-test log. device.
- The complete repository quality run passed 414 tests plus compiler, format, - `https://whoneedhelp.com/safety` was delivered to
xref, Credo, Sobelow, Dialyzer, dependency audit, container, Compose, Helm, `org.whoneedhelp.mobile/.MainActivity` and rendered in the installed app.
migration, rollback, observability, and image-security gates. - No application crash or TLS/SSL/WebView load failure was present in the
filtered release smoke-test log.
- The complete repository quality run passed 443 ExUnit tests and 14 browser
dependency tests, plus compiler, format, xref, Credo, Sobelow, Dialyzer,
dependency audit, container, Compose, Helm, migration, rollback,
observability, and image-security gates.
- The final runtime image scan reported zero detected vulnerabilities.
## First Play Console session ## First Play Console session