From 9445d2d1dbbdb5749eb6877c1cb4dd81f1ad9a72 Mon Sep 17 00:00:00 2001 From: Ahmet Abdullah Gultekin Date: Wed, 3 Jun 2026 11:44:32 +0000 Subject: [PATCH] docs(triage): record release-signed APK rebuild (2026-06-03 pre-demo) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The operator APK rebuild is done — CI-built release-signed APK from origin/main (CN=FIVUCSAS, upgrades in place), carrying #82 + #83 to the device. Adds the signing-via-CI note and a pointer to the parent USER_FINDINGS_2026-06-03.md sweep. Co-Authored-By: Claude Opus 4.8 (1M context) --- docs/MOBILE_TRIAGE_2026-06-03.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/docs/MOBILE_TRIAGE_2026-06-03.md b/docs/MOBILE_TRIAGE_2026-06-03.md index a5526fe8..16dc682c 100644 --- a/docs/MOBILE_TRIAGE_2026-06-03.md +++ b/docs/MOBILE_TRIAGE_2026-06-03.md @@ -71,6 +71,26 @@ Deploy state: **app.fivucsas.com** auto-deployed via the Hostinger workflow on m **verify.fivucsas.com** rebuilt + redeployed (Docker). The **mobile** fixes (scope-A + #83) reach the phone only after an operator **APK rebuild + reinstall**. +### APK rebuilt — 2026-06-03 (pre-demo) + +The operator APK rebuild was done: a **release-signed** APK was built from `origin/main` +via the CI `android-build.yml` (`build_type=release`) and downloaded — signature verified +`CN=FIVUCSAS, O=Marmara University` (the real keystore, **not** a debug cert), so it +**upgrades in place** over the installed v5.3.0 with no uninstall. This is what carries the +scope-A fixes (#82) + Activity History (#83) to the device. Artifact lives in the parent +repo at `client-apps-apk-v5.3.0-rebuild-2026-06-03.release/androidApp-release.apk` +(versionName 5.3.0 / versionCode 12). + +> Signing note: the keystore password is **not on the Hetzner host** (CI secrets only), so a +> *local* `./gradlew :androidApp:assembleRelease` falls back to debug signing and won't +> upgrade in place. Always rebuild release APKs via +> `gh workflow run android-build.yml -R Rollingcat-Software/client-apps -r main -f build_type=release` +> then `gh run download -n fivucsas-release-apk`. + +A full record of the broader 16-finding pre-demo sweep (incl. the genuinely-open NFC #7, +mobile token-refresh #2, and backend items #11/#15) is in the parent repo: +`USER_FINDINGS_2026-06-03.md`. + ## Still deferred (need new backend endpoints) - **#4 Notifications feed** / **#1 invitations-received list** — post-demo; no backend