chore(sync): pull template infra from openMF/kmp-project-template#158 (#2682)

Co-authored-by: Rajan Maurya <therajanmaurya@Rajans-MacBook-Pro.local>

Author: therajanmaurya

.github/ci-gradle.properties

@@ -0,0 +1,17 @@
+# Disable daemon for CI to avoid leftover processes
+org.gradle.daemon=false
+
+# Run tasks in parallel where possible
+org.gradle.parallel=true
+
+# Increase heap and metaspace for larger builds (macOS-latest has ~7 GB available)
+org.gradle.jvmargs=-Xmx7g
+
+# Limit max workers to avoid memory pressure in CI
+org.gradle.workers.max=3
+
+# Disable Kotlin incremental compilation in CI for clean, consistent builds
+kotlin.incremental=false
+
+# Use in-process Kotlin compiler to avoid extra forked processes
+kotlin.compiler.execution.strategy=in-process

.github/workflows/build-and-deploy-site.yml

@@ -0,0 +1,65 @@
+# This workflow is designed to automate the process of building and deploying a Kotlin/JS web application to GitHub Pages.
+# It ensures that whenever changes are merged into the dev branch or when manually triggered, the web application is built,
+# packaged, and deployed to the GitHub Pages environment, making it accessible online.
+
+# Key Features:
+# - Automated web application build using Kotlin/JS
+# - Deployment to GitHub Pages
+# - Supports configurable web project module name
+# - Manages deployment concurrency and environment settings
+# - Provides secure deployment with proper permissions
+
+# Prerequisites:
+# - Kotlin Multiplatform/JS project configured with Gradle
+# - Web module set up for browser distribution
+# - Java 17 or compatible version
+# - GitHub Pages enabled in repository settings
+
+# Workflow Configuration:
+# - Requires input of `web_package_name` to specify the web project module
+# - Uses Windows runner for build process
+# - Leverages GitHub Actions for build, pages configuration, and deployment
+
+# Workflow Triggers:
+# - Can be manually called from other workflows
+# - Supports workflow_call for reusability across projects
+
+# Deployment Process:
+# 1. Checkout repository code
+# 2. Set up Java development environment
+# 3. Build Kotlin/JS web application
+# 4. Configure GitHub Pages
+# 5. Upload built artifacts
+# 6. Deploy to GitHub Pages
+
+# https://github.com/openMF/mifos-x-actionhub/blob/main/.github/workflows/build-and-deploy-site.yaml
+
+# ##############################################################################
+#                 DON'T EDIT THIS FILE UNLESS NECESSARY                        #
+# ##############################################################################
+
+name: Build And Deploy Web App
+
+# Trigger conditions for the workflow
+on:
+  workflow_dispatch:
+
+# Concurrency settings to manage multiple workflow runs
+# This ensures orderly deployment to production environment
+concurrency:
+  group: "web-pages"
+  cancel-in-progress: false
+
+permissions:
+  contents: read  # Read repository contents
+  pages: write    # Write to GitHub Pages
+  id-token: write # Write authentication tokens
+  pull-requests: write # Write to pull requests
+
+jobs:
+  build_and_deploy_web:
+    name: Build And Deploy Web App
+    uses: openMF/mifos-x-actionhub/.github/workflows/build-and-deploy-site.yaml@v1.0.11
+    secrets: inherit
+    with:
+      web_package_name: 'cmp-web' # <-- Change with your web package name

.github/workflows/cache-cleanup.yaml

@@ -7,9 +7,9 @@ on:
 
 jobs:
   cleanup:
-    uses: openMF/mifos-x-actionhub/.github/workflows/cache-cleanup.yaml@v1.0.0
+    uses: openMF/mifos-x-actionhub/.github/workflows/cache-cleanup.yaml@v1.0.11
     with:
       cleanup_pr: ${{ github.event_name == 'pull_request' && github.event.repository.private == true }}
       cleanup_all: ${{ github.event_name == 'workflow_dispatch' }}
     secrets:
-      token: ${{ secrets.GITHUB_TOKEN }}
+      token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/monthly-version-tag.yml

@@ -0,0 +1,66 @@
+# Automated Monthly Release Versioning Workflow
+# ============================================
+
+# Purpose:
+# - Automatically create consistent monthly version tags
+# - Implement a calendar-based versioning strategy
+# - Facilitate easy tracking of monthly releases
+
+# Versioning Strategy:
+# - Tag format: YYYY.MM.0 (e.g., 2024.01.0 for January 2024)
+# - First digit: Full year
+# - Second digit: Month (01-12)
+# - Third digit: Patch version (starts at 0, allows for potential updates)
+
+# Key Features:
+# - Runs automatically on the first day of each month at 3:30 AM UTC
+# - Can be manually triggered via workflow_dispatch
+# - Uses GitHub Actions to generate tags programmatically
+# - Provides a predictable and systematic versioning approach
+
+# Prerequisites:
+# - Repository configured with GitHub Actions
+# - Permissions to create tags
+# - Access to actions/checkout and tag creation actions
+
+# Workflow Triggers:
+# - Scheduled monthly run
+# - Manual workflow dispatch
+# - Callable from other workflows
+
+# Actions Used:
+# 1. actions/checkout@v4 - Checks out repository code
+# 2. josStorer/get-current-time - Retrieves current timestamp
+# 3. rickstaa/action-create-tag - Creates Git tags
+
+# Example Generated Tags:
+# - 2024.01.0 (January 2024 initial release)
+# - 2024.02.0 (February 2024 initial release)
+# - 2024.02.1 (Potential patch for February 2024)
+
+# https://github.com/openMF/mifos-x-actionhub/blob/main/.github/workflows/monthly-version-tag.yaml
+
+# ##############################################################################
+#                 DON'T EDIT THIS FILE UNLESS NECESSARY                        #
+# ##############################################################################
+
+name: Tag Monthly Release
+
+on:
+  # Allow manual triggering of the workflow
+  workflow_dispatch:
+  # Schedule the workflow to run monthly
+  schedule:
+    # Runs at 03:30 UTC on the first day of every month
+    # Cron syntax: minute hour day-of-month month day-of-week
+    - cron: '30 3 1 * *'
+
+concurrency:
+  group: "monthly-release"
+  cancel-in-progress: false
+
+jobs:
+  monthly_release:
+    name: Tag Monthly Release
+    uses: openMF/mifos-x-actionhub/.github/workflows/monthly-version-tag.yaml@v1.0.11
+    secrets: inherit

.github/workflows/multi-platform-build-and-publish.yml

@@ -0,0 +1,165 @@
+# GitHub Actions Workflow for Kotlin Multi-Platform Application Deployment
+#
+# OVERVIEW:
+# This workflow supports building and publishing applications across multiple platforms:
+# - Android (APK/AAB)
+# - iOS (IPA)
+# - Desktop (EXE, MSI, DMG, DEB)
+# - Web (GitHub Pages)
+#
+# PREREQUISITES:
+# Ensure your project is configured with:
+#  - Gradle build system
+#  - Kotlin Multiplatform Project with Android, iOS, Desktop, and Web modules
+#  - Fastlane for deployment automation
+#  - Separate modules/package names for each platform
+#
+# REQUIRED SECRETS:
+# Configure the following secrets in GitHub repository settings:
+# - ORIGINAL_KEYSTORE_FILE: Base64 encoded Android release keystore
+# - ORIGINAL_KEYSTORE_FILE_PASSWORD: Keystore password
+# - ORIGINAL_KEYSTORE_ALIAS: Keystore alias
+# - ORIGINAL_KEYSTORE_ALIAS_PASSWORD: Keystore alias password
+
+# - UPLOAD_KEYSTORE_FILE: Base64 encoded Android release keystore
+# - UPLOAD_KEYSTORE_FILE_PASSWORD: Keystore password
+# - UPLOAD_KEYSTORE_ALIAS: Keystore alias
+# - UPLOAD_KEYSTORE_ALIAS_PASSWORD: Keystore alias password
+
+# - GOOGLESERVICES: Google Services configuration JSON
+# - PLAYSTORECREDS: Play Store service account credentials
+# - FIREBASECREDS: Firebase distribution credentials
+
+# - NOTARIZATION_APPLE_ID: Apple ID for macOS app notarization
+# - NOTARIZATION_PASSWORD: Notarization password
+# - NOTARIZATION_TEAM_ID: Apple developer team ID
+
+# WORKFLOW INPUTS:
+# - release_type: 'internal' (default) or 'beta'
+# - target_branch: Branch to use for release (default: 'dev')
+# - android_package_name: Name of Android module
+# - ios_package_name: Name of iOS module
+# - desktop_package_name: Name of desktop module
+# - web_package_name: Name of web module
+# - publish_android: Enable/disable Android Play Store publishing
+# - build_ios: Enable/disable iOS build
+# - publish_ios: Enable/disable iOS App Store publishing
+
+# USAGE:
+# 1. Ensure all required secrets are configured
+# 2. Customize package names in workflow inputs
+# 3. Toggle platform-specific publishing flags
+# 4. Trigger workflow manually or via GitHub Actions UI
+
+# https://github.com/openMF/mifos-x-actionhub/blob/main/.github/workflows/multi-platform-build-and-publish.yaml
+
+# ##############################################################################
+#                 DON'T EDIT THIS FILE UNLESS NECESSARY                        #
+# ##############################################################################
+name: Multi-Platform Build and Publish
+
+on:
+  workflow_dispatch:
+    inputs:
+      release_type:
+        type: choice
+        options:
+          - internal
+          - beta
+        default: internal
+        description: Release Type
+
+      target_branch:
+        type: string
+        default: 'dev'
+        description: 'Target branch for release'
+
+      distribute_ios_firebase:
+        type: boolean
+        default: false
+        description: Distribute iOS App via Firebase App Distribution
+
+      distribute_ios_testflight:
+        type: boolean
+        default: false
+        description: Distribute iOS App via TestFlight (App Store Connect)
+
+      distribute_ios_appstore:
+        type: boolean
+        default: false
+        description: Distribute iOS App to Appstore
+
+permissions:
+  contents: write
+  id-token: write
+  pages: write
+
+concurrency:
+  group: "reusable"
+  cancel-in-progress: false
+
+jobs:
+  multi_platform_build_and_publish:
+    name: Multi-Platform Build and Publish
+    uses: openMF/mifos-x-actionhub/.github/workflows/multi-platform-build-and-publish.yaml@v1.0.11
+    with:
+      release_type: ${{ inputs.release_type }}
+      target_branch: ${{ inputs.target_branch }}
+      android_package_name: 'cmp-android'
+      ios_package_name: 'cmp-ios'
+      desktop_package_name: 'cmp-desktop'
+      web_package_name: 'cmp-web'
+      metadata_path: './fastlane/metadata'
+      use_cocoapods: true
+      shared_module: ':cmp-shared'
+      distribute_ios_firebase: ${{ inputs.distribute_ios_firebase }}
+      # When App Store is enabled, skip TestFlight — deliver() already uploads
+      # the IPA to App Store Connect which makes the build available in TestFlight.
+      # Running both in parallel causes version conflicts since the upstream
+      # reusable workflow has no job dependency between the two.
+      distribute_ios_testflight: ${{ inputs.distribute_ios_testflight && !inputs.distribute_ios_appstore }}
+      distribute_ios_appstore: ${{ inputs.distribute_ios_appstore }}
+    secrets:
+      original_keystore_file: ${{ secrets.ORIGINAL_KEYSTORE_FILE }}
+      original_keystore_file_password: ${{ secrets.ORIGINAL_KEYSTORE_FILE_PASSWORD }}
+      original_keystore_alias: ${{ secrets.ORIGINAL_KEYSTORE_ALIAS }}
+      original_keystore_alias_password: ${{ secrets.ORIGINAL_KEYSTORE_ALIAS_PASSWORD }}
+
+      upload_keystore_file: ${{ secrets.UPLOAD_KEYSTORE_FILE }}
+      upload_keystore_file_password: ${{ secrets.UPLOAD_KEYSTORE_FILE_PASSWORD }}
+      upload_keystore_alias: ${{ secrets.UPLOAD_KEYSTORE_ALIAS }}
+      upload_keystore_alias_password: ${{ secrets.UPLOAD_KEYSTORE_ALIAS_PASSWORD }}
+
+      notarization_apple_id: ${{ secrets.NOTARIZATION_APPLE_ID }}
+      notarization_password: ${{ secrets.NOTARIZATION_PASSWORD }}
+      notarization_team_id: ${{ secrets.NOTARIZATION_TEAM_ID }}
+      appstore_key_id: ${{ secrets.APPSTORE_KEY_ID }}
+      appstore_issuer_id: ${{ secrets.APPSTORE_ISSUER_ID }}
+      appstore_auth_key: ${{ secrets.APPSTORE_AUTH_KEY }}
+      match_password: ${{ secrets.MATCH_PASSWORD }}
+      match_ssh_private_key: ${{ secrets.MATCH_SSH_PRIVATE_KEY }}
+
+      windows_signing_key: ${{ secrets.WINDOWS_SIGNING_KEY }}
+      windows_signing_password: ${{ secrets.WINDOWS_SIGNING_PASSWORD }}
+      windows_signing_certificate: ${{ secrets.WINDOWS_SIGNING_CERTIFICATE }}
+
+      macos_signing_key: ${{ secrets.MACOS_SIGNING_KEY }}
+      macos_signing_password: ${{ secrets.MACOS_SIGNING_PASSWORD }}
+      macos_signing_certificate: ${{ secrets.MACOS_SIGNING_CERTIFICATE }}
+
+      linux_signing_key: ${{ secrets.LINUX_SIGNING_KEY }}
+      linux_signing_password: ${{ secrets.LINUX_SIGNING_PASSWORD }}
+      linux_signing_certificate: ${{ secrets.LINUX_SIGNING_CERTIFICATE }}
+
+      keychain_password: ${{ secrets.KEYCHAIN_PASSWORD }}
+      certificates_password: ${{ secrets.CERTIFICATES_PASSWORD }}
+      mac_app_distribution_certificate_b64: ${{ secrets.MAC_APP_DISTRIBUTION_CERTIFICATE_B64 }}
+      mac_installer_distribution_certificate_b64: ${{ secrets.MAC_INSTALLER_DISTRIBUTION_CERTIFICATE_B64 }}
+      mac_embedded_provision_b64: ${{ secrets.MAC_EMBEDDED_PROVISION_B64 }}
+      mac_runtime_provision_b64: ${{ secrets.MAC_RUNTIME_PROVISION_B64 }}
+
+      google_services: ${{ secrets.GOOGLESERVICES }}
+      firebase_creds: ${{ secrets.FIREBASECREDS }}
+      playstore_creds: ${{ secrets.PLAYSTORECREDS }}
+      token: ${{ secrets.GITHUB_TOKEN }}
+      supabase_creds: ${{ secrets.SUPABASECREDS }}

.github/workflows/pr-check.yml

@@ -67,9 +67,9 @@ name: PR Checks
 # Trigger conditions for the workflow
 on:
   push:
-    branches: [ development ]  # Runs on pushes to dev branch
+    branches: [ dev ]  # Runs on pushes to dev branch
   pull_request:
-    branches: [ development ]  # Runs on pushes to dev branch
+    branches: [ dev ]  # Runs on pushes to dev branch
 
 # Concurrency settings to prevent multiple simultaneous workflow runs
 concurrency:

.github/workflows/promote-to-production.yml

@@ -70,6 +70,6 @@ jobs:
   # Job to promote app from beta to production in Play Store
   play_promote_production:
     name: Promote Beta to Production Play Store
-    uses: openMF/mifos-x-actionhub/.github/workflows/promote-to-production.yaml@v1.0.0
+    uses: openMF/mifos-x-actionhub/.github/workflows/promote-to-production.yaml@v1.0.11
     secrets:
-      playstore_creds: ${{ secrets.PLAYSTORECREDS }}
+      playstore_creds: ${{ secrets.PLAYSTORECREDS }}