GitHub Actions Pipeline

• Use GitHub Actions as the primary CI/CD platform
• Trigger on

  push

  to

  main

  and on all Pull Requests
• Pipeline MUST include these stages in order:

Stage 1: Quality Gate

- name: Analyze
  run: flutter analyze --fatal-infos --fatal-warnings
- name: Format Check
  run: dart format --set-exit-if-changed .
- name: Run Tests
  run: flutter test --coverage

• Zero warnings policy —

  --fatal-infos

  ensures no info-level issues pass
• Format check MUST use

  --set-exit-if-changed

  to enforce consistent formatting

Stage 2: Build

- name: Build APK
  run: flutter build apk --flavor prod --dart-define-from-file=config/prod.json --release
- name: Build IPA
  run: flutter build ipa --flavor prod --dart-define-from-file=config/prod.json --release --export-options-plist=ios/ExportOptions.plist

• Always build with

  --flavor prod

  and

  --dart-define-from-file=config/prod.json

• Use a single

  main.dart

  — do NOT pass

  -t lib/main_prod.dart

Stage 3: Deploy (on main merge only)

• Upload to Firebase App Distribution for internal testing
• Upload to Google Play Internal Track / TestFlight for staging
• Production release requires manual approval gate

Versioning Strategy

• Follow Semantic Versioning:

  MAJOR.MINOR.PATCH+BUILD

• Bump

  PATCH

  for bug fixes,

  MINOR

  for features,

  MAJOR

  for breaking changes
• Set version in

  pubspec.yaml

  :

  version: 1.2.3+45

• The

  +BUILD

  number MUST auto-increment in CI (use build number from CI environment)

Code Signing

• Store signing keys and certificates in GitHub Secrets (never in repo)
• Android: Store keystore as base64-encoded secret, decode in CI
• iOS: Use App Store Connect API key for automated signing
• NEVER commit

  *.jks

  ,

  *.keystore

  ,

  *.p12

  , or

  *.mobileprovision

  files

PR Requirements

• All PRs MUST pass: analysis (0 warnings), formatting, and tests before merge
• Require at least 1 code review approval
• Branch protection on

  main

  : no direct pushes, require status checks

Release Checklist

• Version bumped in

  pubspec.yaml

• CHANGELOG.md updated
• All tests passing on CI
• Build succeeds for both Android and iOS
• Tested on physical device with production flavor
• Git tag created matching version (

  v1.2.3

  )