Publish the signed release APK and a SHA-256 checksum as a Codeberg release, a direct-download channel for users who don't want F-Droid. Gitea already push-mirrors branches and tags to Codeberg, but releases aren't git objects and don't sync, so the pipeline creates the release over the Codeberg API and attaches calendula_v<version>.apk + .sha256. Same app-signed APK the F-Droid repo serves, so no added trust surface. Best-effort (continue-on-error) so a Codeberg outage never fails an already-published F-Droid release; skips cleanly when CODEBERG_TOKEN is unset. Upsert + same-name asset replacement keep re-runs safe. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
19 KiB
19 KiB