gowalk-cicd 1.0.18 → 1.0.20

package/README.md

@@ -103,6 +103,22 @@ in Play Console; every later run detects API readiness and uploads to the
 `internal` track automatically. Override the track or status with repository
 variables `GOOGLE_PLAY_TRACK` and `GOOGLE_PLAY_STATUS`.
 
+### Runner disk space
+
+An `ubuntu-24.04` runner leaves roughly 14 GB free on `/`, and a release Flutter
+build — Gradle caches, build intermediates, and a 100–200 MB AAB — does not
+reliably fit. The failure surfaces far from its cause:
+
+```
+> java.io.IOException: No space left on device
+zip I/O error: No space left on device
+```
+
+The Android job removes the preinstalled toolchains a Flutter build never uses
+(.NET, the Android NDK, GHC, PowerShell, Swift, Chromium, global node modules)
+and prunes Docker images, reclaiming roughly 25 GB in a few seconds. It prints
+`df -h /` before and after. Linux only; skipped in Bitrise mode.
+
 ### Private git dependencies (Flutter)
 
 A Flutter app can depend on private git packages:
@@ -127,8 +143,13 @@ the token lives in one revocable place:
 gh secret set GIT_PRIVATE_TOKEN --repo my-org/my-app
 ```
 
-Without the secret the step is skipped, so repos that do not need it are
-unaffected.
+Without the secret the step prints a note and exits 0, so repos that do not need
+it are unaffected.
+
+> The emptiness check happens in the shell rather than in the step's `if:`.
+> GitHub does not expose the `secrets` context to a step-level `if:` — putting
+> it there does not evaluate to false, it makes the entire workflow file invalid
+> and every run fails before any job starts.
 
 ### Localized release notes
 

package/action/.daemux-version

@@ -1 +1 @@
-1.0.18
+1.0.20

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.18
+1.0.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.18",
+  "version": "1.0.20",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/templates/deploy.yml

@@ -130,6 +130,22 @@ jobs:
           else
             echo "enabled=false" >> "$GITHUB_OUTPUT"
           fi
+      # A release Flutter build (Gradle caches + intermediates + a 100-200 MB AAB)
+      # does not fit in the ~14 GB an ubuntu runner leaves free on /, and the
+      # failure surfaces far from its cause: "No space left on device" out of
+      # aapt2, zip, or Gradle's own cache writer. Reclaiming the preinstalled
+      # toolchains this build will never use buys ~25 GB and costs a few seconds.
+      - name: Free runner disk space
+        if: ${{ steps.mode.outputs.mode == 'local' && runner.os == 'Linux' }}
+        shell: bash
+        run: |
+          echo "Before:"; df -h / | tail -1
+          sudo rm -rf /usr/share/dotnet /usr/local/lib/android/sdk/ndk \
+                      /opt/ghc /usr/local/.ghcup /usr/local/share/powershell \
+                      /usr/share/swift /usr/local/share/chromium \
+                      /usr/local/lib/node_modules 2>/dev/null || true
+          sudo docker image prune --all --force >/dev/null 2>&1 || true
+          echo "After:";  df -h / | tail -1
       - name: Set up Java
         if: ${{ steps.mode.outputs.mode == 'local' }}
         uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5
@@ -150,14 +166,23 @@ jobs:
       # https://github.com/<org>/<repo>.git URLs resolve on the runner, so the
       # token lives in one revocable place. No secret, no step — repos that do
       # not need it are unaffected.
+      # The `secrets` context is NOT available in a step-level `if:` — using it
+      # there does not evaluate false, it makes the whole workflow file invalid
+      # and every run fails before any job starts. So the secret comes in as env
+      # and the emptiness check happens in the shell.
       - name: Authenticate private git dependencies
-        if: ${{ steps.mode.outputs.mode == 'local' && steps.flutter.outputs.enabled == 'true' && secrets.GIT_PRIVATE_TOKEN != '' }}
+        if: ${{ steps.mode.outputs.mode == 'local' && steps.flutter.outputs.enabled == 'true' }}
         shell: bash
         env:
           GIT_PRIVATE_TOKEN: ${{ secrets.GIT_PRIVATE_TOKEN }}
         run: |
-          git config --global url."https://x-access-token:${GIT_PRIVATE_TOKEN}@github.com/".insteadOf "https://github.com/"
+          if [ -z "${GIT_PRIVATE_TOKEN:-}" ]; then
+            echo "No GIT_PRIVATE_TOKEN secret; private git dependencies must carry their own credentials."
+            exit 0
+          fi
           echo "::add-mask::$GIT_PRIVATE_TOKEN"
+          git config --global url."https://x-access-token:${GIT_PRIVATE_TOKEN}@github.com/".insteadOf "https://github.com/"
+          echo "Configured authenticated github.com remotes for pub."
       # Same reason as the iOS job: apps using AppLocalizations must generate it
       # before anything analyses or compiles them. No-op for apps without l10n.
       - name: Generate localizations