Add app_version to workflow_dispatch inputs and worker dispatch payload. Collect only setup.exe from bundle/nsis, prefer installer URLs in release lookup, and use git-tag-safe job IDs.
Enable cleartext HTTP in release APK, add network security config, and set connect-src CSP. Add CORS on Worker API for cross-origin fetches from packaged apps.
Co-authored-by: Cursor <cursoragent@cursor.com>
- Build Android APK for arm64-v8a only (covers modern devices; saves ~5 min)
- Disable release LTO and raise codegen-units in CI via env overrides
- Cache Android NDK and Gradle dependencies between runs
- Share rust-cache key across Windows/Android jobs
Co-authored-by: ShuMengya <shumengya666@outlook.com>
- Use workspace-scoped npm ci to avoid compiling better-sqlite3 on Windows
(Node 24 has no prebuilt binaries and node-gyp fails in CI)
- Source setup-android-signing.sh so WEB2APP_ANDROID_* vars reach sign script
Co-authored-by: ShuMengya <shumengya666@outlook.com>
