- .forgejo/workflows/release.yaml: tag-triggered (v*) pipeline that builds a
split-per-abi Android arm64 APK (signed via ANDROID_KEYSTORE_BASE64 /
ANDROID_KEY_PROPERTIES secrets), a Windows MSIX plus portable zip, and
attaches every asset to a Forgejo prerelease through the releases API;
Flutter pinned to 3.47.x because pubspec.lock requires flutter >=3.44.0
- scripts/publish_alpha.ps1: local one-shot build+publish equivalent
(codegen, APK, portable zip, MSIX, release + asset upload under dist/v*)
- android: release signing wired to key.properties with minify, resource
shrinking, and new proguard-rules.pro (Flutter embedding, SQLCipher, and
JSON keep rules)
- pubspec: msix ^3.16.7 dev dependency and msix_config publisher identity
- scripts/test.ps1: Forgejo asset-upload probe reading the token from env;
the hardcoded token was removed and its rotation is tracked as a
BUILD_STATE.md verification gate
- gitignore: /dist/, **/android/build/, and android/key.properties
Mike Kell
a40589cc89