ci: fix archive — install profile by UUID and pass PROVISIONING_PROFILE to xcodebuild

.gitea/workflows/ios-release.yaml

@@ -6,8 +6,8 @@ on:
       - "ios-v*"
 
 concurrency:
-  group: ${{ gitea.workflow }}-${{ gitea.ref }}
-  cancel-in-progress: true
+  group: ios-macos-runner
+  cancel-in-progress: false
 
 jobs:
   # ── archive & release to TestFlight ──────────────────────────────────────
@@ -32,10 +32,7 @@ jobs:
         run: command -v just || brew install just
 
       - name: Set build number from run number
-        run: |
-          sed -i '' \
-            's/CURRENT_PROJECT_VERSION: .*/CURRENT_PROJECT_VERSION: ${{ gitea.run_number }}/' \
-            ios/LibNovel/project.yml
+        run: just ios-set-build-number ${{ gitea.run_number }}
 
       - name: Import signing certificate
         env:
@@ -60,8 +57,10 @@ jobs:
         run: |
           PP_PATH=$RUNNER_TEMP/profile.mobileprovision
           echo "$PROFILE_BASE64" | base64 --decode > $PP_PATH
+          UUID=$(security cms -D -i "$PP_PATH" | plutil -extract UUID raw -)
           mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
-          cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles/
+          cp $PP_PATH ~/Library/MobileDevice/Provisioning\ Profiles/$UUID.mobileprovision
+          echo "PROFILE_UUID=$UUID" >> $GITHUB_ENV
 
       - name: Write App Store Connect API key
         env:
@@ -82,25 +81,18 @@ jobs:
       - name: Archive
         env:
           USER: runner
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+          PROFILE_UUID: ${{ env.PROFILE_UUID }}
         run: just ios-archive
 
       - name: Export IPA
-        run: |
-          xcodebuild -exportArchive \
-            -archivePath $RUNNER_TEMP/LibNovel.xcarchive \
-            -exportPath $RUNNER_TEMP/ipa \
-            -exportOptionsPlist ios/LibNovel/ExportOptions.plist
+        run: just ios-export
 
       - name: Upload to TestFlight
         env:
           ASC_KEY_ID: ${{ secrets.ASC_KEY_ID }}
           ASC_ISSUER_ID: ${{ secrets.ASC_ISSUER_ID }}
-        run: |
-          xcrun altool --upload-app \
-            --type ios \
-            --file $RUNNER_TEMP/ipa/LibNovel.ipa \
-            --apiKey "$ASC_KEY_ID" \
-            --apiIssuer "$ASC_ISSUER_ID"
+        run: just ios-upload
 
       - name: Upload IPA artifact
         uses: actions/upload-artifact@v4

.gitea/workflows/ios.yaml

@@ -17,7 +17,7 @@ on:
       - ".gitea/workflows/ios-release.yaml"
 
 concurrency:
-  group: ${{ gitea.workflow }}-${{ gitea.ref }}
+  group: ios-macos-runner
   cancel-in-progress: true
 
 jobs:

justfile

@@ -136,7 +136,10 @@ ios-archive: ios-gen ios-resolve
         -scheme {{ios_scheme}} \
         -configuration Release \
         -clonedSourcePackagesDirPath {{ios_spm}} \
-        -archivePath {{runner_temp}}/LibNovel.xcarchive
+        -archivePath {{runner_temp}}/LibNovel.xcarchive \
+        CODE_SIGN_STYLE=Manual \
+        DEVELOPMENT_TEAM="$APPLE_TEAM_ID" \
+        PROVISIONING_PROFILE="$PROFILE_UUID"
 
 # Export an IPA from the archive produced by ios-archive.
 # Requires ios/LibNovel/ExportOptions.plist.