Enhance Capacitor build workflows by adding version_code handling and improving upload status management

Author: Chuseok22

.github/workflows/capacitor-app-build.yml

@@ -33,6 +33,7 @@ jobs:
       should-build: ${{ steps.check-update.outputs.should-build }}
       tag: ${{ steps.check-update.outputs.tag }}
       version: ${{ steps.check-update.outputs.version }}
+      version_code: ${{ steps.check-update.outputs.version_code }}
 
     steps:
       - name: 🛎️ Checkout
@@ -47,6 +48,11 @@ jobs:
 
           SEMVER_TAG_REGEX='^v(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$' # vX.Y.Z
           SEMVER_VER_REGEX='^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$' # X.Y.Z
+          
+          SHOULD_BUILD="false"
+          TAG=""
+          VERSION=""
+          VERSION_CODE=""
 
           if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
             # 수동 실행인 경우
@@ -57,6 +63,7 @@ jobs:
               exit 1
             fi
             VERSION="${TAG#v}"
+            SHOULD_BUILD="true"
             echo "should-build=true" >> $GITHUB_OUTPUT
             echo "tag=$TAG" >> $GITHUB_OUTPUT
             echo "version=$VERSION" >> $GITHUB_OUTPUT
@@ -66,12 +73,17 @@ jobs:
             RAW_VER="${{ github.event.client_payload.new_version }}"
 
             if [ -n "$RAW_TAG" ] && [[ "$RAW_TAG" =~ $SEMVER_TAG_REGEX ]]; then
+              TAG="$RAW_TAG"
               VERSION="${RAW_TAG#v}"
+              SHOULD_BUILD="true"
               echo "should-build=true"  >> "$GITHUB_OUTPUT"
               echo "tag=$RAW_TAG"       >> "$GITHUB_OUTPUT"
               echo "version=$VERSION"   >> "$GITHUB_OUTPUT"
               echo "✅ repository_dispatch tag: $RAW_TAG"
             elif [ -n "$RAW_VER" ] && [[ "$RAW_VER" =~ $SEMVER_VER_REGEX ]]; then
+              TAG="$RAW_TAG"
+              VERSION="${RAW_TAG#v}"
+              SHOULD_BUILD="true"
               echo "should-build=true"  >> "$GITHUB_OUTPUT"
               echo "tag=v$RAW_VER"      >> "$GITHUB_OUTPUT"
               echo "version=$RAW_VER"   >> "$GITHUB_OUTPUT"
@@ -81,6 +93,33 @@ jobs:
               echo "📝 repository_dispatch payload에 유효한 tag/version이 없습니다. 빌드 생략"
             fi
           fi
+          
+          echo "should-build=$SHOULD_BUILD" >> "$GITHUB_OUTPUT"
+
+          if [ "$SHOULD_BUILD" = "true" ]; then
+            # VERSION_CODE 생성 (v0.1.15 -> 000115 -> 115)
+            IFS='.' read -r MAJOR MINOR PATCH <<< "$VERSION"
+
+            # 각 파트 0~99 제한 (2자리 스키마 고정)
+            if [ "$MAJOR" -gt 99 ] || [ "$MINOR" -gt 99 ] || [ "$PATCH" -gt 99 ]; then
+              echo "❌ VERSION_CODE 생성 실패: major/minor/patch는 0~99 범위여야 함 (현재: $VERSION)"
+              exit 1
+            fi
+
+            PADDED="$(printf "%02d%02d%02d" "$MAJOR" "$MINOR" "$PATCH")"
+            VERSION_CODE="$(echo "$PADDED" | sed 's/^0*//')"
+            if [ -z "$VERSION_CODE" ]; then
+              VERSION_CODE="1"
+            fi
+
+            echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+            echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+            echo "version_code=$VERSION_CODE" >> "$GITHUB_OUTPUT"
+
+            echo "✅ TAG=$TAG"
+            echo "✅ VERSION=$VERSION"
+            echo "✅ VERSION_CODE=$VERSION_CODE (from $PADDED)"
+          fi
 
   # ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
   # Job 2: Next.js 빌드
@@ -175,7 +214,7 @@ jobs:
       - name: 🏗️ Build APK
         env:
           VERSION_NAME: ${{ needs.check-version-update.outputs.version }}
-          VERSION_CODE: ${{ github.run_number }}
+          VERSION_CODE: ${{ needs.check-version-update.outputs.version_code }}
           KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
@@ -191,7 +230,7 @@ jobs:
       - name: 🏗️ Build AAB
         env:
           VERSION_NAME: ${{ needs.check-version-update.outputs.version }}
-          VERSION_CODE: ${{ github.run_number }}
+          VERSION_CODE: ${{ needs.check-version-update.outputs.version_code }}
           KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
           KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
@@ -283,18 +322,18 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-  
+          
           xcodebuild -version
           xcodebuild -showsdks
-  
+          
           # ✅ (추가) iOS 26 SDK 존재 여부 강제 검증
           if ! xcodebuild -showsdks | grep -q "iphoneos26"; then
             echo "❌ iOS 26 SDK not found on this runner."
             echo "Installed Xcode apps:"
             ls -d /Applications/Xcode*.app 2>/dev/null || true
             exit 1
           fi
-  
+          
           echo "✅ iOS 26 SDK detected."
 
       - name: 📥 Download web build

.github/workflows/capacitor-app-upload.yml

@@ -15,7 +15,7 @@ permissions:
   contents: read
 
 concurrency:
-  group: capacitor-upload-${{ github.event.client_payload.tag || github.event.inputs.tag }}
+  group: capacitor-upload-${{ github.event.client_payload.run_id || github.run_id }}-${{ github.event.client_payload.tag || github.event.inputs.tag }}
   cancel-in-progress: false
 
 env:
@@ -33,6 +33,10 @@ env:
   # Google Play 업로드 트랙: internal / alpha / beta / production
   GOOGLE_PLAY_TRACK: "internal"
 
+  # draft 앱이면 completed 불가 -> 일단 draft로 고정
+  # 앱이 draft 상태를 벗어나면 "completed"로 변경하여 내부 테스트 '출시'까지 자동화 가능
+  GOOGLE_PLAY_RELEASE_STATUS: "completed"
+
   # 표시용 프로젝트명
   PROJECT_DISPLAY_NAME: "AppName"
 
@@ -136,7 +140,7 @@ jobs:
           releaseFiles: ${{ env.AAB_PATH }}
           track: ${{ env.GOOGLE_PLAY_TRACK }}
           releaseName: ${{ needs.resolve_inputs.outputs.release_name }}
-          status: completed
+          status: ${{ env.GOOGLE_PLAY_RELEASE_STATUS }}
 
   upload_ios:
     name: Upload iOS (IPA) to TestFlight
@@ -207,29 +211,34 @@ jobs:
           KEY_DIR="$RUNNER_TEMP/appstoreconnect"
           mkdir -p "$KEY_DIR"
 
-          P8_PATH="$KEY_DIR/AuthKey_${ASC_KEY_ID}.p8"
-          export P8_PATH # python에서 os.environ로 읽도록 환경변수로 export
+          API_KEY_INFO="$KEY_DIR/api_key.json"
+          export API_KEY_INFO
 
-          # macOS/Linux base64 옵션 차이 제거를 위해 python으로 디코딩
+          # api_key_path(JSON 파일)는 "key"(p8 내용) 필드를 요구함.
+          # key_filepath/key_content는 JSON 키로는 유효하지 않음. :contentReference[oaicite:6]{index=6}
           python3 - <<'PY'
-          import base64, os
-          p8_path = os.environ["P8_PATH"]
-          data = os.environ["ASC_PRIVATE_KEY_BASE64"].strip()
-          with open(p8_path, "wb") as f:
-            f.write(base64.b64decode(data))
-          PY
+          import base64, json, os
+
+          key_id = os.environ["ASC_KEY_ID"].strip()
+          issuer_id = os.environ["ASC_ISSUER_ID"].strip()
+          key_b64 = os.environ["ASC_PRIVATE_KEY_BASE64"].strip()
 
-          API_KEY_INFO="$KEY_DIR/api_key_info.json"
-          cat > "$API_KEY_INFO" <<EOF
-          {
-            "key_id": "${ASC_KEY_ID}",
-            "issuer_id": "${ASC_ISSUER_ID}",
-            "key_filepath": "${P8_PATH}"
+          key_text = base64.b64decode(key_b64).decode("utf-8").strip()
+
+          payload = {
+            "key_id": key_id,
+            "issuer_id": issuer_id,
+            "key": key_text,
+            "in_house": False
           }
-          EOF
+
+          path = os.environ["API_KEY_INFO"]
+          with open(path, "w", encoding="utf-8") as f:
+            json.dump(payload, f)
+          PY
 
           echo "ASC_API_KEY_INFO=$API_KEY_INFO" >> "$GITHUB_ENV"
-          echo "✅ App Store Connect API key files ready"
+          echo "✅ App Store Connect API key JSON ready: $API_KEY_INFO"
 
       - name: 🚀 Upload to TestFlight (pilot)
         env: