ci: switch iOS code signing to manual and update Fastlane for provisioning profile config

Author: michaelschoenbaechler

.env.example

@@ -21,3 +21,7 @@ KEYCHAIN_PASSWORD=
 # Optional overrides (defaults are configured in fastlane)
 APP_IDENTIFIER=ch.michaelschoenbaechler.parlwatch
 APPLE_TEAM_ID=65DUBW68Z2
+# Optional: overrides CFBundleShortVersionString (e.g. 2026.3.3)
+IOS_MARKETING_VERSION=
+# Optional: overrides CFBundleVersion
+IOS_BUILD_NUMBER=

.github/workflows/ios-deploy.yml

@@ -11,13 +11,19 @@ on:
           - testflight
           - appstore
         default: testflight
+      marketing_version:
+        description: Optional marketing version (CFBundleShortVersionString), e.g. 2026.3.3
+        required: false
+        type: string
 
 jobs:
   deploy-ios:
     runs-on: macos-latest
     env:
+      TZ: Europe/Zurich
       APP_IDENTIFIER: ch.michaelschoenbaechler.parlwatch
       APPLE_TEAM_ID: 65DUBW68Z2
+      IOS_MARKETING_VERSION: ${{ github.event.inputs.marketing_version }}
       APP_STORE_CONNECT_KEY_ID: ${{ secrets.APP_STORE_CONNECT_KEY_ID }}
       APP_STORE_CONNECT_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
       APP_STORE_CONNECT_API_KEY: ${{ secrets.APP_STORE_CONNECT_API_KEY }}

docs/ios-deployment.md

@@ -41,11 +41,18 @@ Optional:
 
 - `APP_IDENTIFIER` (default: `ch.michaelschoenbaechler.parlwatch`)
 - `APPLE_TEAM_ID` (default: `65DUBW68Z2`)
+- `IOS_MARKETING_VERSION` (overrides `CFBundleShortVersionString`)
+- `IOS_BUILD_NUMBER` (overrides `CFBundleVersion`)
 
 Local note:
 
 - Local deploy expects signing certificate/profile to already be available in your login keychain.
 
+Versioning note:
+
+- In CI, if `IOS_MARKETING_VERSION` is not provided, Fastlane auto-sets `CFBundleShortVersionString` to a date format `YYYY.M.D` (for example `2026.3.3`).
+- This avoids App Store Connect rejections when the approved version is already higher than your checked-in version string.
+
 ## GitHub Actions deployment
 
 Use the `iOS Deploy` workflow (`.github/workflows/ios-deploy.yml`) and choose:
@@ -124,3 +131,4 @@ Add these repository secrets before running the workflow:
    - `KEYCHAIN_PASSWORD`
 3. Trigger workflow: `Actions` > `iOS Deploy` > `Run workflow`.
 4. Select target: `testflight` or `appstore`.
+5. Optional: set `marketing_version` if you want a manual short version for that run.

ios/App/fastlane/Fastfile

@@ -19,6 +19,22 @@ def app_store_connect_api_key_from_env
 end
 
 platform :ios do
+  private_lane :set_ci_marketing_version do
+    marketing_version = ENV["IOS_MARKETING_VERSION"].to_s.strip
+
+    if marketing_version.empty? && ENV["CI"] == "true"
+      now = Time.now
+      marketing_version = now.strftime("%Y.%-m.%-d")
+    end
+
+    return if marketing_version.empty?
+
+    increment_version_number(
+      xcodeproj: "App.xcodeproj",
+      version_number: marketing_version
+    )
+  end
+
   private_lane :set_ci_build_number do
     build_number = ENV["IOS_BUILD_NUMBER"].to_s.strip
     build_number = ENV["GITHUB_RUN_ID"].to_s.strip if build_number.empty?
@@ -60,6 +76,7 @@ platform :ios do
   desc "Build and upload an iOS build to TestFlight"
   lane :deploy_testflight do
     api_key = app_store_connect_api_key_from_env
+    set_ci_marketing_version
     set_ci_build_number
     build_release
 
@@ -73,6 +90,7 @@ platform :ios do
   desc "Build and upload an iOS build to App Store Connect"
   lane :deploy_appstore do
     api_key = app_store_connect_api_key_from_env
+    set_ci_marketing_version
     set_ci_build_number
     build_release