deps: bump gradle-wrapper from 8.13 to 9.7.1 in /android

.github/dependabot.yml

@@ -0,0 +1,48 @@
+version: 2
+
+updates:
+  # .NET CLI — versions live in /Directory.Packages.props
+  - package-ecosystem: "nuget"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "deps"
+
+  # Android — versions live in /android/gradle/libs.versions.toml
+  - package-ecosystem: "gradle"
+    directory: "/android"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "deps"
+    # Dependabot assigns a dependency to the FIRST group whose pattern matches,
+    # not to every group it matches. `compose` must therefore come before
+    # `androidx` — the other way round, "androidx.*" swallows every Compose
+    # artifact and the compose group never receives a member.
+    groups:
+      compose:
+        patterns:
+          - "androidx.compose*"
+      androidx:
+        patterns:
+          - "androidx.*"
+    ignore:
+      # Upgrading the download engine changes download behaviour, not build
+      # plumbing. It needs the manual URL matrix in PRIVATE_NOTES.local.md,
+      # so it does not belong in an automated PR.
+      - dependency-name: "io.github.junkfood02.youtubedl-android:*"
+
+  # Workflow actions in .github/workflows/
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+    open-pull-requests-limit: 3
+    commit-message:
+      prefix: "ci"

.github/workflows/release.yml

@@ -0,0 +1,165 @@
+name: Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag (e.g. v0.1.0). Tag will be created on the commit that runs the workflow.'
+        required: true
+        type: string
+      prerelease:
+        description: 'Mark as pre-release?'
+        required: false
+        type: boolean
+        default: false
+      notes:
+        description: 'Optional release notes (Markdown). Leave blank to auto-generate from commits.'
+        required: false
+        type: string
+
+concurrency:
+  group: release-${{ inputs.tag }}
+  cancel-in-progress: false
+
+jobs:
+  build-win:
+    name: Build snaglite.exe
+    runs-on: windows-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up .NET SDK
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: '10.0.x'
+
+      - name: Restore
+        run: dotnet restore src/SnagLite/SnagLite.csproj
+
+      - name: Publish
+        run: dotnet publish src/SnagLite/SnagLite.csproj -c Release -r win-x64 --self-contained -o publish --no-restore
+
+      - name: Upload snaglite.exe
+        uses: actions/upload-artifact@v4
+        with:
+          name: win-x64
+          path: publish/snaglite.exe
+          if-no-files-found: error
+
+  build-android:
+    name: Build Android release APKs
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: android
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '17'
+
+      - name: Set up Android SDK
+        uses: android-actions/setup-android@v3
+
+      - name: Make gradlew executable
+        run: chmod +x gradlew
+
+      - name: Cache Gradle
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: ${{ runner.os }}-gradle-${{ hashFiles('android/**/*.gradle*', 'android/gradle/wrapper/gradle-wrapper.properties') }}
+          restore-keys: |
+            ${{ runner.os }}-gradle-
+
+      - name: Decode release keystore
+        env:
+          KS_B64: ${{ secrets.SNAGLITE_KEYSTORE_B64 }}
+        run: |
+          set -euo pipefail
+          if [ -z "${KS_B64:-}" ]; then
+            echo "::error::SNAGLITE_KEYSTORE_B64 secret is empty; cannot build release-signed APKs."
+            exit 1
+          fi
+          echo "$KS_B64" | base64 -d > "$RUNNER_TEMP/snaglite-release.jks"
+          echo "SNAGLITE_KEYSTORE_PATH=$RUNNER_TEMP/snaglite-release.jks" >> "$GITHUB_ENV"
+
+      - name: Build release APKs
+        env:
+          SNAGLITE_KEYSTORE_PASS: ${{ secrets.SNAGLITE_KEYSTORE_PASS }}
+          SNAGLITE_KEY_ALIAS:     ${{ secrets.SNAGLITE_KEY_ALIAS }}
+          SNAGLITE_KEY_PASS:      ${{ secrets.SNAGLITE_KEY_PASS }}
+        run: ./gradlew :app:assembleRelease --no-daemon --stacktrace
+
+      - name: Upload release APKs
+        uses: actions/upload-artifact@v4
+        with:
+          name: android-release
+          path: android/app/build/outputs/apk/release/*.apk
+          if-no-files-found: error
+
+  publish:
+    name: Create GitHub Release
+    needs: [build-win, build-android]
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: dist
+
+      - name: Stage release assets with version tag in filename
+        run: |
+          set -euo pipefail
+          mkdir -p release
+          cp "dist/win-x64/snaglite.exe" "release/snaglite-${{ inputs.tag }}-windows-x64.exe"
+          for f in dist/android-release/*.apk; do
+            base=$(basename "$f" .apk)
+            cp "$f" "release/snaglite-${{ inputs.tag }}-android-${base#app-}.apk"
+          done
+          ls -lh release/
+
+      - name: Build release body
+        env:
+          NOTES: ${{ inputs.notes }}
+        run: |
+          set -euo pipefail
+          if [ -n "${NOTES:-}" ]; then
+            printf '%s\n' "$NOTES" > release/BODY.md
+          else
+            cat > release/BODY.md <<'EOF'
+          Tiny video downloader. Paste a URL, get the file — highest available quality, no setup.
+
+          ## What's in this release
+
+          - Android APKs (release-signed) — `arm64-v8a`, `armeabi-v7a`, `x86_64`, and universal variants.
+          - `snaglite.exe` — single-file Windows CLI (.NET 10 self-contained, ~42 MB).
+
+          ## Quick start
+
+          - **Android**: sideload the APK matching your CPU. First launch bootstraps `yt-dlp` + `ffmpeg` + `aria2c` automatically.
+          - **Windows**: drop the exe on your `PATH`, then `snaglite <url>`.
+
+          Full docs: [README](https://github.com/corecompiled/SnagLite#readme).
+          EOF
+          fi
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ inputs.tag }}
+          name: ${{ inputs.tag }}
+          body_path: release/BODY.md
+          generate_release_notes: true
+          prerelease: ${{ inputs.prerelease }}
+          files: release/snaglite-*
+          fail_on_unmatched_files: true