build ios app with github actions

.github/workflows/ios.yml

@@ -0,0 +1,66 @@
+name: Build source code on iOS
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  build_ios:
+    runs-on: macOS-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Use Node.js 20
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+
+      - name: Install dependencies
+        id: install_code
+        run: npm ci
+
+      - name: Build
+        id: build_code
+        run: npm run build -- --configuration production
+
+      - uses: actions/cache@v3
+        with:
+          path: ios/App/Pods
+          key: ${{ runner.os }}-pods-${{ hashFiles('**/Podfile.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-pods-
+
+      - name: Sync
+        id: sync_code
+        run: npx cap sync
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.2'
+          bundler-cache: true
+          working-directory: fastlane
+
+      - uses: maierj/fastlane-action@v3.1.0
+        env:
+          APP_STORE_CONNECT_TEAM_ID: ${{ secrets.APP_STORE_CONNECT_TEAM_ID }}
+          BUNDLE_IDENTIFIER: ${{ secrets.BUNDLE_IDENTIFIER }}
+          BUILD_CERTIFICATE_BASE64: ${{ secrets.BUILD_CERTIFICATE_BASE64 }}
+          BUILD_PROVISION_PROFILE_BASE64: ${{ secrets.BUILD_PROVISION_PROFILE_BASE64 }}
+          APPLE_KEY_ID: ${{ secrets.APPLE_KEY_ID }}
+          APPLE_ISSUER_ID: ${{ secrets.APPLE_ISSUER_ID }}
+          APPLE_KEY_CONTENT: ${{ secrets.APPLE_KEY_CONTENT }}
+          P12_PASSWORD: ${{ secrets.P12_PASSWORD }}
+          APPLE_PROFILE_NAME: ${{ secrets.APPLE_PROFILE_NAME }}
+        with:
+          lane: ios beta
+          subdirectory: fastlane
+
+      - name: Upload release bundle
+        uses: actions/upload-artifact@v4
+        with:
+          name: ios-release
+          path: ./App.ipa
+          retention-days: 10

fastlane/Fastfile

@@ -0,0 +1,139 @@
+platform :ios do
+  desc 'Export ipa and submit to TestFlight'
+  lane :beta do
+    keychain_info = { keychain_name: "ios-build-#{Time.now.to_i}.keychain", keychain_password: SecureRandom.uuid }
+
+    begin
+      setup_signing(keychain_info)
+      bump_build_number
+      build_app_with_signing(keychain_info)
+      submit_to_testflight
+    ensure
+      cleanup_keychain(keychain_info)
+    end
+  end
+
+  private_lane :setup_signing do |options|
+    create_keychain(
+      name: options[:keychain_name],
+      password: options[:keychain_password],
+      unlock: true,
+      timeout: 0,
+      lock_when_sleeps: false,
+      add_to_search_list: true
+    )
+    import_cert(options)
+    install_profile
+    update_project_settings
+  end
+
+  lane :bump_build_number do
+    file = File.read('../package.json')
+    data_hash = JSON.parse(file)
+    api_key = app_store_connect_api_key(
+      key_id: ENV['APPLE_KEY_ID'],
+      issuer_id: ENV['APPLE_ISSUER_ID'],
+      key_content: ENV['APPLE_KEY_CONTENT'],
+      is_key_content_base64: true,
+      duration: 1200,
+      in_house: false
+    )
+    build_num = app_store_build_number(
+      api_key: api_key,
+      app_identifier: ENV['BUNDLE_IDENTIFIER'],
+      live: false
+    )
+    build_num = build_num + 1
+    UI.message("Bumped build number to #{build_num}")
+    increment_build_number(
+      build_number: build_num,
+      xcodeproj: "./ios/App/App.xcodeproj",
+      skip_info_plist: true
+    )
+  end
+
+  private_lane :import_cert do |options|
+    cert_path = "#{Dir.tmpdir}/build_certificate.p12"
+    File.write(cert_path, Base64.decode64(ENV['BUILD_CERTIFICATE_BASE64']))
+    import_certificate(
+      certificate_path: cert_path,
+      certificate_password: ENV['P12_PASSWORD'] || "",
+      keychain_name: options[:keychain_name],
+      keychain_password: options[:keychain_password],
+      log_output: true
+    )
+    File.delete(cert_path)
+  end
+
+  private_lane :cleanup_keychain do |options|
+    delete_keychain(
+      name: options[:keychain_name]
+    )
+  end
+
+  private_lane :install_profile do
+    profile_path = "#{Dir.tmpdir}/build_pp.mobileprovision"
+    File.write(profile_path, Base64.decode64(ENV['BUILD_PROVISION_PROFILE_BASE64']))
+    UI.user_error!("Failed to create provisioning profile at #{profile_path}") unless File.exist?(profile_path)
+    ENV['PROVISIONING_PROFILE_PATH'] = profile_path
+    install_provisioning_profile(path: profile_path)
+    File.delete(profile_path)
+  end
+
+  private_lane :update_project_settings do
+    update_code_signing_settings(
+      use_automatic_signing: false,
+      path: "./ios/App/App.xcodeproj",
+      code_sign_identity: "iPhone Distribution",
+      profile_name: ENV['APPLE_PROFILE_NAME'],
+      bundle_identifier: ENV['BUNDLE_IDENTIFIER'],
+      team_id: ENV['APP_STORE_CONNECT_TEAM_ID']
+    )
+    update_project_team(
+      path: "./ios/App/App.xcodeproj",
+      teamid: ENV['APP_STORE_CONNECT_TEAM_ID']
+    )
+  end
+
+  private_lane :build_app_with_signing do |options|
+    unlock_keychain(
+      path: options[:keychain_name],
+      password: options[:keychain_password],
+      set_default: false
+    )
+    build_app(
+      workspace: "./ios/App/App.xcworkspace",
+      scheme: "PyCon US",
+      configuration: "Release",
+      export_method: "app-store",
+      output_name: "App.ipa",
+      export_options: {
+        provisioningProfiles: {
+          ENV['BUNDLE_IDENTIFIER'] => ENV['APPLE_PROFILE_NAME']
+        }
+      },
+      xcargs: "-verbose",
+      buildlog_path: "./build_logs",
+      export_xcargs: "-allowProvisioningUpdates",
+    )
+  end
+
+#   private_lane :submit_to_testflight do
+#     api_key = app_store_connect_api_key(
+#       key_id: ENV['APPLE_KEY_ID'],
+#       issuer_id: ENV['APPLE_ISSUER_ID'],
+#       key_content: ENV['APPLE_KEY_CONTENT'],
+#       is_key_content_base64: true,
+#       duration: 1200,
+#       in_house: false
+#     )
+#     pilot(
+#       api_key: api_key,
+#       skip_waiting_for_build_processing: true,
+#       skip_submission: true,
+#       distribute_external: false,
+#       notify_external_testers: false,
+#       ipa: "./App.ipa"
+#     )
+#   end
+end

fastlane/Gemfile

@@ -0,0 +1,3 @@
+source "https://rubygems.org"
+
+gem "fastlane"