Enable cleartext HTTP in release APK, add network security config, and set connect-src CSP. Add CORS on Worker API for cross-origin fetches from packaged apps.
Co-authored-by: Cursor <cursoragent@cursor.com>
tauri icon requires a square source image. Uploaded logos like 727x721
caused Prepare template to fail. Use sharp to center-crop to square
before generating platform icons.
Co-authored-by: ShuMengya <shumengya666@outlook.com>
- Build Android APK for arm64-v8a only (covers modern devices; saves ~5 min)
- Disable release LTO and raise codegen-units in CI via env overrides
- Cache Android NDK and Gradle dependencies between runs
- Share rust-cache key across Windows/Android jobs
Co-authored-by: ShuMengya <shumengya666@outlook.com>
sign-android-apk.sh now sources setup-android-signing.sh when
WEB2APP_ANDROID_KEYSTORE is unset, so signing works even when the
workflow invokes setup and sign as separate bash processes (e.g. CI re-runs
of older workflow definitions).
Co-authored-by: ShuMengya <shumengya666@outlook.com>
- Use workspace-scoped npm ci to avoid compiling better-sqlite3 on Windows
(Node 24 has no prebuilt binaries and node-gyp fails in CI)
- Source setup-android-signing.sh so WEB2APP_ANDROID_* vars reach sign script
Co-authored-by: ShuMengya <shumengya666@outlook.com>
