expo-publish.yml

name: EXPO Publish

on:
  workflow_dispatch:
    inputs:
      branch:
        description: EAS update branch
        required: true
        default: main

jobs:
  publish:
    runs-on: ubuntu-latest
    env:
      # Quieter deprecation noise for actions running on older Node until defaults switch to 24.
      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
    steps:
      - name: Checkout
        uses: actions/checkout@v5

      - name: Setup Node
        uses: actions/setup-node@v5
        with:
          node-version: 22
          cache: npm
          cache-dependency-path: package-lock.json

      - name: Install dependencies
        run: npm ci

      - name: Resolve target update branch
        id: target
        shell: bash
        run: |
          set -euo pipefail
          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
            target_branch="${{ inputs.branch }}"
          else
            target_branch="main"
          fi
          echo "branch=$target_branch" >> "$GITHUB_OUTPUT"

      - name: Verify Expo auth
        env:
          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
        shell: bash
        run: |
          set -euo pipefail
          if [[ -z "${EXPO_TOKEN:-}" ]]; then
            echo "::error::Add repository secret EXPO_TOKEN (Expo dashboard → Access tokens)."
            exit 1
          fi
          npx eas-cli@latest whoami

      - name: Publish OTA update
        env:
          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
        shell: bash
        run: |
          set -euo pipefail
          npx eas-cli@latest update \
            --non-interactive \
            --branch "${{ steps.target.outputs.branch }}" \
            --message "CI publish ${GITHUB_SHA}"