gowalk-cicd 1.0.19 → 1.0.20

package/README.md

@@ -143,8 +143,13 @@ the token lives in one revocable place:
 gh secret set GIT_PRIVATE_TOKEN --repo my-org/my-app
 ```
 
-Without the secret the step is skipped, so repos that do not need it are
-unaffected.
+Without the secret the step prints a note and exits 0, so repos that do not need
+it are unaffected.
+
+> The emptiness check happens in the shell rather than in the step's `if:`.
+> GitHub does not expose the `secrets` context to a step-level `if:` — putting
+> it there does not evaluate to false, it makes the entire workflow file invalid
+> and every run fails before any job starts.
 
 ### Localized release notes
 

package/action/.daemux-version

@@ -1 +1 @@
-1.0.19
+1.0.20

package/android-action/.daemux-version

@@ -1 +1 @@
-1.0.19
+1.0.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gowalk-cicd",
-  "version": "1.0.19",
+  "version": "1.0.20",
   "description": "Zero-config GitHub Actions delivery for iOS TestFlight and Android Google Play.",
   "type": "module",
   "bin": {

package/templates/deploy.yml

@@ -166,14 +166,23 @@ jobs:
       # https://github.com/<org>/<repo>.git URLs resolve on the runner, so the
       # token lives in one revocable place. No secret, no step — repos that do
       # not need it are unaffected.
+      # The `secrets` context is NOT available in a step-level `if:` — using it
+      # there does not evaluate false, it makes the whole workflow file invalid
+      # and every run fails before any job starts. So the secret comes in as env
+      # and the emptiness check happens in the shell.
       - name: Authenticate private git dependencies
-        if: ${{ steps.mode.outputs.mode == 'local' && steps.flutter.outputs.enabled == 'true' && secrets.GIT_PRIVATE_TOKEN != '' }}
+        if: ${{ steps.mode.outputs.mode == 'local' && steps.flutter.outputs.enabled == 'true' }}
         shell: bash
         env:
           GIT_PRIVATE_TOKEN: ${{ secrets.GIT_PRIVATE_TOKEN }}
         run: |
-          git config --global url."https://x-access-token:${GIT_PRIVATE_TOKEN}@github.com/".insteadOf "https://github.com/"
+          if [ -z "${GIT_PRIVATE_TOKEN:-}" ]; then
+            echo "No GIT_PRIVATE_TOKEN secret; private git dependencies must carry their own credentials."
+            exit 0
+          fi
           echo "::add-mask::$GIT_PRIVATE_TOKEN"
+          git config --global url."https://x-access-token:${GIT_PRIVATE_TOKEN}@github.com/".insteadOf "https://github.com/"
+          echo "Configured authenticated github.com remotes for pub."
       # Same reason as the iOS job: apps using AppLocalizations must generate it
       # before anything analyses or compiles them. No-op for apps without l10n.
       - name: Generate localizations