spotube/.github/workflows/spotube-release-binary.yml

name: Release

on:
  workflow_dispatch:
    inputs:
      release_type:
        description: 'Release type'
        required: true
        type: choice
        default: 'stable'
        options:
          - stable
          - beta
          - nightly
      target_preset:
        description: 'Target preset'
        required: true
        type: choice
        default: 'all'
        options:
          - all
          - desktop
          - desktop-no-mac
          - mobile
          - windows
          - linux
          - macos
          - android
          - ios
          - custom
      build_windows:
        description: '  -> Windows x86_64 (.exe) (if custom)'
        required: false
        type: boolean
        default: true
      build_linux:
        description: '  -> Linux x86_64 (.deb, .rpm, .AppImage, .tar.xz) (if custom)'
        required: false
        type: boolean
        default: true
      build_linux_arm64:
        description: '  -> Linux ARM64 (.deb, .rpm, .AppImage, .tar.xz) (if custom)'
        required: false
        type: boolean
        default: true
      build_macos:
        description: '  -> macOS Universal (.dmg) (if custom)'
        required: false
        type: boolean
        default: true
      build_android:
        description: '  -> Android (.apk) (if custom)'
        required: false
        type: boolean
        default: true
      build_ios:
        description: '  -> iOS (.ipa) (if custom)'
        required: false
        type: boolean
        default: true
      dry_run:
        description: 'Dry run (build & upload artifacts only, skip creating release)'
        required: false
        type: boolean
        default: false
      debug_ssh:
        description: 'Enable SSH debug session on failure (tmate)'
        required: false
        type: boolean
        default: false

# Read-only by default; only create-release gets write access
permissions:
  contents: read

# Never cancel a running release when another is dispatched, and let stable, beta and nightly run side by side
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}-${{ inputs.release_type }}
  cancel-in-progress: false

env:
  COMPOSE_WEBVIEW_REPO: KRTirtho/ComposeNativeWebview
  COMPOSE_WEBVIEW_COMMIT: cbd36f88927298a28a2d64c6acf7ec3b2def6f9d

jobs:
  prepare-deps:
    name: Prepare Dependencies
    runs-on: macos-latest
    steps:
      - name: Checkout ComposeNativeWebview
        uses: actions/checkout@v7
        with:
          repository: ${{ env.COMPOSE_WEBVIEW_REPO }}
          ref: ${{ env.COMPOSE_WEBVIEW_COMMIT }}
          token: ${{ secrets.GITHUB_TOKEN }}
          path: compose-webview

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Android SDK
        uses: android-actions/setup-android@v4

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      - name: Publish compose-webview to mavenLocal
        working-directory: compose-webview
        run: |
          chmod +x gradlew
          ./gradlew publishToMavenLocal          

      - name: Upload maven local
        uses: actions/upload-artifact@v7
        with:
          name: maven-local
          path: ~/.m2/repository/

  build-android:
    name: Android
    if: ${{ inputs.target_preset == 'all' || inputs.target_preset == 'mobile' || inputs.target_preset == 'android' || inputs.target_preset == '' || (inputs.target_preset == 'custom' && inputs.build_android) }}
    needs: prepare-deps
    timeout-minutes: 120
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7

      - name: Download maven local
        uses: actions/download-artifact@v8
        with:
          name: maven-local
          path: ~/.m2/repository/

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      - name: Make gradlew executable
        run: chmod +x gradlew

      - name: Configure Android signing
        working-directory: composeApp
        env:
          KEYSTORE: ${{ secrets.KEYSTORE }}
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEYSTORE_KEY_ALIAS: ${{ secrets.KEYSTORE_KEY_ALIAS }}
          KEYSTORE_KEY_PASSWORD: ${{ secrets.KEYSTORE_KEY_PASSWORD }}
        run: |
          if [ -n "$KEYSTORE" ]; then
            echo "$KEYSTORE" | base64 --decode > "${{ github.workspace }}/composeApp/upload-keystore.jks"
            echo "release.signing.storeFile=${{ github.workspace }}/composeApp/upload-keystore.jks" >> local.properties
            echo "release.signing.storePassword=${KEYSTORE_PASSWORD}" >> local.properties
            echo "release.signing.keyAlias=${KEYSTORE_KEY_ALIAS}" >> local.properties
            echo "release.signing.keyPassword=${KEYSTORE_KEY_PASSWORD}" >> local.properties
          else
            echo "No custom keystore secret found, generating build keystore..."
            keytool -genkey -v -keystore "${{ github.workspace }}/composeApp/upload-keystore.jks" -alias spotube -keyalg RSA -keysize 2048 -validity 10000 -storepass spotubepass -keypass spotubepass -dname "CN=Spotube, OU=Mobile, O=Spotube, C=US"
            echo "release.signing.storeFile=${{ github.workspace }}/composeApp/upload-keystore.jks" >> local.properties
            echo "release.signing.storePassword=spotubepass" >> local.properties
            echo "release.signing.keyAlias=spotube" >> local.properties
            echo "release.signing.keyPassword=spotubepass" >> local.properties
          fi          

      - name: Assemble Release
        run: |
          if [ "${{ inputs.release_type }}" = "nightly" ]; then
            ./gradlew :composeApp:assembleNightlyRelease -Pnightly=true -PbuildNumber=${{ github.run_number }}
          else
            ./gradlew :composeApp:assembleStableRelease
          fi          

      - name: Rename APK
        run: |
          APK_FILE=$(find composeApp/build/outputs/apk -path "*elease*" -name "*.apk" -type f | head -1)
          cp "$APK_FILE" Spotube-android-all-arch.apk          

      - name: Upload APK
        uses: actions/upload-artifact@v7
        with:
          name: android-apk
          path: Spotube-android-all-arch.apk

      - name: Setup tmate session on failure
        if: ${{ inputs.debug_ssh && failure() }}
        uses: mxschmitt/action-tmate@v3
        with:
          limit-access-to-actor: true

  build-linux:
    name: Linux Desktop
    if: ${{ inputs.target_preset == 'all' || inputs.target_preset == 'desktop' || inputs.target_preset == 'desktop-no-mac' || inputs.target_preset == 'linux' || inputs.target_preset == '' || (inputs.target_preset == 'custom' && inputs.build_linux) }}
    needs: prepare-deps
    timeout-minutes: 120
    runs-on: ubuntu-latest
    steps:
      # Full history: the metainfo's release notes come from git-cliff
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0

      - name: Download maven local
        uses: actions/download-artifact@v8
        with:
          name: maven-local
          path: ~/.m2/repository/

      - name: Install packaging tools
        run: |
          sudo apt-get update
          sudo apt-get install -y rpm fuse build-essential zlib1g-dev patchelf zstd          

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      - name: Make gradlew executable
        run: chmod +x gradlew

      - name: Cache GraalVM toolchain
        uses: actions/cache@v6
        with:
          path: ~/.gradle/nucleus/graalvm
          key: graalvm-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('gradle/libs.versions.toml', 'composeApp/build.gradle.kts') }}
          restore-keys: graalvm-${{ runner.os }}-${{ runner.arch }}-

      - name: Package Linux
        env:
          # Nucleus lists GraalVM CE releases via the GitHub API; unauthenticated calls hit the 60/hour limit
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew :composeApp:packageGraalvmDeb :composeApp:packageGraalvmRpm -Pnightly=${{ inputs.release_type == 'nightly' }} -PbuildNumber=${{ github.run_number }}

      # Portable tarball the AUR and Flathub packages install from. Like deb/rpm it uses the system's VLC,
      # GTK and WebKitGTK, so it is packed from the distributable before the AppImage build replaces it
      - name: Install git-cliff
        uses: taiki-e/install-action@v2
        with:
          tool: git-cliff

      - name: Package Linux tarball
        run: |
          if [ "${{ inputs.release_type }}" = "nightly" ]; then
            VERSION=nightly
          else
            VERSION=$(./gradlew -q :composeApp:printVersion)
          fi
          # Desktop entry + metainfo, with the release history from git-cliff
          ./gradlew :composeApp:renderPackagingLinux -Pnightly=${{ inputs.release_type == 'nightly' }} -PbuildNumber=${{ github.run_number }}
          packaging/package-linux-tarball.sh "$VERSION" "${{ inputs.release_type == 'nightly' && 'nightly' || 'stable' }}" .          

      - name: Upload tarball
        uses: actions/upload-artifact@v7
        with:
          name: linux-tarball
          path: spotube-linux-*-x86_64.tar.xz

      # Only the AppImage bundles VLC, GTK and WebKitGTK; deb/rpm depend on the distro packages
      - name: Package Linux AppImage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew :composeApp:packageGraalvmAppImage -PappImage=true -Pnightly=${{ inputs.release_type == 'nightly' }} -PbuildNumber=${{ github.run_number }}

      - name: Rename Linux artifacts
        run: |
          DEB_FILE=$(find composeApp/build/compose/binaries/main/graalvm-deb -maxdepth 1 -name "*.deb" -type f | head -1)
          RPM_FILE=$(find composeApp/build/compose/binaries/main/graalvm-rpm -maxdepth 1 -name "*.rpm" -type f | head -1)
          cp "$DEB_FILE" Spotube-linux-x86_64.deb
          cp "$RPM_FILE" Spotube-linux-x86_64.rpm
          APPIMAGE_FILE=$(find composeApp/build/compose/binaries/main -name "*.AppImage" -type f | head -1)
          cp "$APPIMAGE_FILE" Spotube-linux-x86_64.AppImage          

      - name: Upload DEB
        uses: actions/upload-artifact@v7
        with:
          name: linux-deb
          path: Spotube-linux-x86_64.deb

      - name: Upload RPM
        uses: actions/upload-artifact@v7
        with:
          name: linux-rpm
          path: Spotube-linux-x86_64.rpm

      - name: Upload AppImage
        uses: actions/upload-artifact@v7
        with:
          name: linux-appimage
          path: Spotube-linux-x86_64.AppImage

      - name: Setup tmate session on failure
        if: ${{ inputs.debug_ssh && failure() }}
        uses: mxschmitt/action-tmate@v3
        with:
          limit-access-to-actor: true

  build-linux-arm64:
    name: Linux Desktop (aarch64)
    if: ${{ inputs.target_preset == 'all' || inputs.target_preset == 'desktop' || inputs.target_preset == 'desktop-no-mac' || inputs.target_preset == 'linux' || inputs.target_preset == '' || (inputs.target_preset == 'custom' && inputs.build_linux_arm64) }}
    needs: prepare-deps
    timeout-minutes: 120
    runs-on: ubuntu-24.04-arm
    steps:
      # Full history: the metainfo's release notes come from git-cliff
      - uses: actions/checkout@v7
        with:
          fetch-depth: 0

      # The arm64 runner image ships without an Android SDK/NDK, but :composeApp configuration needs both
      # (Gobley's cargo plugin resolves the NDK directory for the Android Rust targets)
      - name: Set up Android SDK
        uses: android-actions/setup-android@v4
        with:
          packages: tools platform-tools ndk;28.2.13676358

      - name: Download maven local
        uses: actions/download-artifact@v8
        with:
          name: maven-local
          path: ~/.m2/repository/

      - name: Install packaging tools
        run: |
          sudo apt-get update
          sudo apt-get install -y rpm fuse build-essential zlib1g-dev patchelf zstd          

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      - name: Make gradlew executable
        run: chmod +x gradlew

      - name: Cache GraalVM toolchain
        uses: actions/cache@v6
        with:
          path: ~/.gradle/nucleus/graalvm
          key: graalvm-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('gradle/libs.versions.toml', 'composeApp/build.gradle.kts') }}
          restore-keys: graalvm-${{ runner.os }}-${{ runner.arch }}-

      - name: Package Linux
        env:
          # Nucleus lists GraalVM CE releases via the GitHub API; unauthenticated calls hit the 60/hour limit
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew :composeApp:packageGraalvmDeb :composeApp:packageGraalvmRpm -Pnightly=${{ inputs.release_type == 'nightly' }} -PbuildNumber=${{ github.run_number }}

      # Portable tarball the AUR and Flathub packages install from. Like deb/rpm it uses the system's VLC,
      # GTK and WebKitGTK, so it is packed from the distributable before the AppImage build replaces it
      - name: Install git-cliff
        uses: taiki-e/install-action@v2
        with:
          tool: git-cliff

      - name: Package Linux tarball
        run: |
          if [ "${{ inputs.release_type }}" = "nightly" ]; then
            VERSION=nightly
          else
            VERSION=$(./gradlew -q :composeApp:printVersion)
          fi
          # Desktop entry + metainfo, with the release history from git-cliff
          ./gradlew :composeApp:renderPackagingLinux -Pnightly=${{ inputs.release_type == 'nightly' }} -PbuildNumber=${{ github.run_number }}
          packaging/package-linux-tarball.sh "$VERSION" "${{ inputs.release_type == 'nightly' && 'nightly' || 'stable' }}" .          

      - name: Upload tarball
        uses: actions/upload-artifact@v7
        with:
          name: linux-tarball-arm64
          path: spotube-linux-*-aarch64.tar.xz

      # Only the AppImage bundles VLC, GTK and WebKitGTK; deb/rpm depend on the distro packages
      - name: Package Linux AppImage
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew :composeApp:packageGraalvmAppImage -PappImage=true -Pnightly=${{ inputs.release_type == 'nightly' }} -PbuildNumber=${{ github.run_number }}

      - name: Rename Linux artifacts
        run: |
          DEB_FILE=$(find composeApp/build/compose/binaries/main/graalvm-deb -maxdepth 1 -name "*.deb" -type f | head -1)
          RPM_FILE=$(find composeApp/build/compose/binaries/main/graalvm-rpm -maxdepth 1 -name "*.rpm" -type f | head -1)
          cp "$DEB_FILE" Spotube-linux-aarch64.deb
          cp "$RPM_FILE" Spotube-linux-aarch64.rpm
          APPIMAGE_FILE=$(find composeApp/build/compose/binaries/main -name "*.AppImage" -type f | head -1)
          cp "$APPIMAGE_FILE" Spotube-linux-aarch64.AppImage          

      - name: Upload DEB
        uses: actions/upload-artifact@v7
        with:
          name: linux-deb-arm64
          path: Spotube-linux-aarch64.deb

      - name: Upload RPM
        uses: actions/upload-artifact@v7
        with:
          name: linux-rpm-arm64
          path: Spotube-linux-aarch64.rpm

      - name: Upload AppImage
        uses: actions/upload-artifact@v7
        with:
          name: linux-appimage-arm64
          path: Spotube-linux-aarch64.AppImage

      - name: Setup tmate session on failure
        if: ${{ inputs.debug_ssh && failure() }}
        uses: mxschmitt/action-tmate@v3
        with:
          limit-access-to-actor: true

  build-windows:
    name: Windows Desktop
    if: ${{ inputs.target_preset == 'all' || inputs.target_preset == 'desktop' || inputs.target_preset == 'desktop-no-mac' || inputs.target_preset == 'windows' || inputs.target_preset == '' || (inputs.target_preset == 'custom' && inputs.build_windows) }}
    needs: prepare-deps
    timeout-minutes: 120
    runs-on: windows-latest
    steps:
      - uses: actions/checkout@v7

      - name: Download maven local
        uses: actions/download-artifact@v8
        with:
          name: maven-local
          path: ~/.m2/repository/

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      # native-image links with MSVC
      - name: Set up MSVC
        uses: ilammy/msvc-dev-cmd@v1

      - name: Cache GraalVM toolchain
        uses: actions/cache@v6
        with:
          path: ~/.gradle/nucleus/graalvm
          key: graalvm-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('gradle/libs.versions.toml', 'composeApp/build.gradle.kts') }}
          restore-keys: graalvm-${{ runner.os }}-${{ runner.arch }}-

      - name: Package EXE
        env:
          # Nucleus lists GraalVM CE releases via the GitHub API; unauthenticated calls hit the 60/hour limit
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: ./gradlew :composeApp:packageGraalvmExe -Pnightly=${{ inputs.release_type == 'nightly' }} -PbuildNumber=${{ github.run_number }}

      - name: Rename Windows artifacts
        shell: pwsh
        run: |
          # Top level only: subfolders hold the unpacked app, and __* are electron-builder helpers
          $EXE_FILE = Get-ChildItem -Path composeApp/build/compose/binaries/main/graalvm-exe -Filter "*.exe" |
            Where-Object { $_.Name -notlike '__*' } | Select-Object -First 1
          Copy-Item $EXE_FILE.FullName Spotube-windows-x86_64-setup.exe          

      - name: Upload EXE
        uses: actions/upload-artifact@v7
        with:
          name: windows-exe
          path: Spotube-windows-x86_64-setup.exe

      - name: Setup tmate session on failure
        if: ${{ inputs.debug_ssh && failure() }}
        uses: mxschmitt/action-tmate@v3
        with:
          limit-access-to-actor: true

  build-macos:
    name: macOS Desktop
    if: ${{ inputs.target_preset == 'all' || inputs.target_preset == 'desktop' || inputs.target_preset == 'macos' || inputs.target_preset == '' || (inputs.target_preset == 'custom' && inputs.build_macos) }}
    needs: prepare-deps
    timeout-minutes: 120
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v7

      - name: Download maven local
        uses: actions/download-artifact@v8
        with:
          name: maven-local
          path: ~/.m2/repository/

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      - name: Make gradlew executable
        run: chmod +x gradlew

      - name: Cache GraalVM toolchain
        uses: actions/cache@v6
        with:
          path: ~/.gradle/nucleus/graalvm
          key: graalvm-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('gradle/libs.versions.toml', 'composeApp/build.gradle.kts') }}
          restore-keys: graalvm-${{ runner.os }}-${{ runner.arch }}-

      - name: Package DMG
        env:
          # Nucleus lists GraalVM CE releases via the GitHub API; unauthenticated calls hit the 60/hour limit
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        # The free macOS runner has 3 cores / 7 GB. With the default 4g Gradle + 3g Kotlin daemons idling,
        # native-image only gets ~3 GB and spends ~40% of its time in GC (47 min build vs ~15 on Linux).
        # A single-use daemon with a smaller heap and in-process Kotlin compilation leaves the RAM to it.
        run: >
          ./gradlew :composeApp:packageGraalvmDmg
          --no-daemon
          -Dorg.gradle.jvmargs="-Xmx3g -XX:MaxMetaspaceSize=1g"
          -Pkotlin.compiler.execution.strategy=in-process
          -Pnightly=${{ inputs.release_type == 'nightly' }}
          -PbuildNumber=${{ github.run_number }}          

      - name: Rename macOS artifact
        run: |
          DMG_FILE=$(find composeApp/build/compose/binaries/main/graalvm-dmg -maxdepth 1 -name "*.dmg" -type f | head -1)
          cp "$DMG_FILE" Spotube-macos-universal.dmg          

      - name: Upload DMG
        uses: actions/upload-artifact@v7
        with:
          name: macos-dmg
          path: Spotube-macos-universal.dmg

      - name: Setup tmate session on failure
        if: ${{ inputs.debug_ssh && failure() }}
        uses: mxschmitt/action-tmate@v3
        with:
          limit-access-to-actor: true

  build-ios:
    name: iOS
    if: ${{ inputs.target_preset == 'all' || inputs.target_preset == 'mobile' || inputs.target_preset == 'ios' || inputs.target_preset == '' || (inputs.target_preset == 'custom' && inputs.build_ios) }}
    needs: prepare-deps
    timeout-minutes: 120
    runs-on: macos-latest
    steps:
      - uses: actions/checkout@v7

      - name: Download maven local
        uses: actions/download-artifact@v8
        with:
          name: maven-local
          path: ~/.m2/repository/

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Rust
        uses: dtolnay/rust-toolchain@stable

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      - name: Make gradlew executable
        run: chmod +x gradlew

      # Unsigned on purpose: there is no Apple developer account in CI. The IPA is meant for sideloading
      # (AltStore, Sideloadly, ...), which re-signs it with the user's own certificate.
      # The Gradle build phase inside Xcode reads these as project properties.
      - name: Build unsigned app
        env:
          ORG_GRADLE_PROJECT_nightly: ${{ inputs.release_type == 'nightly' }}
          ORG_GRADLE_PROJECT_buildNumber: ${{ github.run_number }}
        run: >
          xcodebuild
          -project iosApp/iosApp.xcodeproj
          -scheme iosApp
          -configuration Release
          -sdk iphoneos
          -destination 'generic/platform=iOS'
          -derivedDataPath build/ios
          CODE_SIGNING_ALLOWED=NO
          CODE_SIGNING_REQUIRED=NO
          CODE_SIGN_IDENTITY=""
          DEVELOPMENT_TEAM=""
          build          

      - name: Package IPA
        run: |
          APP=$(find build/ios/Build/Products/Release-iphoneos -maxdepth 1 -name "*.app" -type d | head -1)
          mkdir Payload
          cp -R "$APP" Payload/
          zip -qry Spotube-ios.ipa Payload          

      - name: Upload IPA
        uses: actions/upload-artifact@v7
        with:
          name: ios-ipa
          path: Spotube-ios.ipa

      - name: Setup tmate session on failure
        if: ${{ inputs.debug_ssh && failure() }}
        uses: mxschmitt/action-tmate@v3
        with:
          limit-access-to-actor: true

  create-release:
    name: Create GitHub Release
    if: ${{ !inputs.dry_run && !cancelled() && always() }}
    needs:
      - prepare-deps
      - build-android
      - build-linux
      - build-linux-arm64
      - build-windows
      - build-macos
      - build-ios
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v7

      # The build resolves its plugins from mavenLocal, so Gradle needs the same setup as the build jobs
      - name: Download maven local
        uses: actions/download-artifact@v8
        with:
          name: maven-local
          path: ~/.m2/repository/

      - name: Set up JDK 21
        uses: actions/setup-java@v6
        with:
          distribution: temurin
          java-version: 21

      - name: Set up Gradle
        uses: gradle/actions/setup-gradle@v6

      - name: Set release variables
        id: vars
        run: |
          if [ "${{ inputs.release_type }}" != "nightly" ]; then
            chmod +x gradlew
            # printVersion includes the -beta.N suffix when betaNumber is set in build.gradle.kts
            VERSION=$(./gradlew -q :composeApp:printVersion)
            TAG="v${VERSION}"
            echo "is_prerelease=false" >> "$GITHUB_OUTPUT"
            echo "is_draft=true" >> "$GITHUB_OUTPUT"
            echo "release_name=Spotube ${TAG}" >> "$GITHUB_OUTPUT"
          else
            TAG="nightly"
            VERSION="$(date +%Y-%m-%d)-${{ github.run_number }}"
            echo "is_prerelease=true" >> "$GITHUB_OUTPUT"
            echo "is_draft=false" >> "$GITHUB_OUTPUT"
            echo "release_name=Nightly ${VERSION}" >> "$GITHUB_OUTPUT"
          fi
          echo "tag=${TAG}" >> "$GITHUB_OUTPUT"          

      - name: Download all artifacts
        continue-on-error: true
        uses: actions/download-artifact@v8

      - name: Verify build artifacts exist
        id: check_artifacts
        run: |
          COUNT=$(find . -maxdepth 2 -type f \( -name "*.apk" -o -name "*.deb" -o -name "*.rpm" -o -name "*.AppImage" -o -name "*.tar.xz" -o -name "*.exe" -o -name "*.dmg" -o -name "*.ipa" \) 2>/dev/null | wc -l)
          echo "Found $COUNT build artifact(s)."
          if [ "$COUNT" -eq 0 ]; then
            echo "has_artifacts=false" >> "$GITHUB_OUTPUT"
            echo "No build artifacts were found. Skipping release publish step."
          else
            echo "has_artifacts=true" >> "$GITHUB_OUTPUT"
          fi          

      - name: Generate release notes
        if: steps.check_artifacts.outputs.has_artifacts == 'true'
        run: |
          echo "## Downloads" > release-notes.md
          echo "" >> release-notes.md
          for dir in android-apk linux-deb linux-rpm linux-appimage linux-tarball linux-deb-arm64 linux-rpm-arm64 linux-appimage-arm64 linux-tarball-arm64 windows-exe macos-dmg ios-ipa; do
            if [ -d "$dir" ]; then
              echo "### $dir" >> release-notes.md
              for f in "$dir"/*; do
                [ -f "$f" ] && echo "- \`$(basename "$f")\`" >> release-notes.md
              done
              echo "" >> release-notes.md
            fi
          done          

      - name: Create or Update Release
        if: steps.check_artifacts.outputs.has_artifacts == 'true'
        uses: softprops/action-gh-release@v3
        with:
          tag_name: ${{ steps.vars.outputs.tag }}
          # A new tag (stable) would otherwise point at the default branch instead of the built commit
          target_commitish: ${{ github.sha }}
          fail_on_unmatched_files: false
          name: ${{ steps.vars.outputs.release_name }}
          body_path: release-notes.md
          draft: ${{ steps.vars.outputs.is_draft }}
          prerelease: ${{ steps.vars.outputs.is_prerelease }}
          files: |
            android-apk/*.apk
            linux-deb/*.deb
            linux-rpm/*.rpm
            linux-appimage/*.AppImage
            linux-tarball/*.tar.xz
            linux-deb-arm64/*.deb
            linux-rpm-arm64/*.rpm
            linux-appimage-arm64/*.AppImage
            linux-tarball-arm64/*.tar.xz
            windows-exe/*.exe
            macos-dmg/*.dmg
            ios-ipa/*.ipa