fix: tag versioning (#86)

* fix: tag versioning
* ci: remove codeql action

---------

Co-authored-by: matteo-cristino <cristino.matteo97@gmail.com>

.github/workflows/build_alpha_release.yml

@@ -5,24 +5,48 @@ on:
     branches: ['main']
 
 jobs:
-  build_android:
+  semantic-release:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+    outputs:
+      release: ${{ steps.tag_release.outputs.release }}
+      version: ${{ steps.tag_release.outputs.version }}
     steps:
-      - uses: actions/checkout@v4
-      - name: Git Sumbodule Update
-        run: |
-          git submodule update --init
-      - name: Install Node.js
-        uses: actions/setup-node@v4
+      - uses: dyne/pnpm@main
         with:
           node-version: 20
-      - uses: pnpm/action-setup@v2
-        name: Install pnpm
+          pnpm-version: 8
+      - name: Tag release
+        id: tag_release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          npx semantic-release >semantic-release.log
+          cat semantic-release.log
+          if [[ `git tag --points-at HEAD` == "" ]]; then
+            echo "release=False" >> $GITHUB_OUTPUT
+          else
+            echo "release=True" >> $GITHUB_OUTPUT
+            awk '/Published release/ { printf("version=v%s\n",$8) }' semantic-release.log >> $GITHUB_OUTPUT
+          fi
+          echo "Result"
+          cat $GITHUB_OUTPUT
+  
+
+
+  build_android:
+    runs-on: ubuntu-latest
+    needs: semantic-release
+    if: ${{ needs.semantic-release.outputs.release == 'True' }}
+    steps:
+      - uses: dyne/pnpm@main
         with:
-          version: 8
-          run_install: false
-
-      - uses: actions/cache@v3
+          submodules: true
+          node-version: 20
+          pnpm-version: 8
+      - uses: actions/cache@v4
         with:
           path: |
             ~/.gradle/caches
@@ -45,7 +69,7 @@ jobs:
         with:
           ruby-version: '3.0'
           bundler-cache: true
-      - uses: maierj/fastlane-action@v3.0.0
+      - uses: maierj/fastlane-action@v3.1.0
         env:
           KEYSTORE_PATH: ${{ steps.android_keystore.outputs.filePath }}
           KEYSTORE_KEY_ALIAS: ${{ secrets.KEYSTORE_KEY_ALIAS }}
@@ -55,68 +79,11 @@ jobs:
         with:
           lane: alpha
       - run: mv release.apk verifier.apk
-      - name: upload binary artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: verifier
-          path: |
-            verifier.apk
-
-  semantic-release:
-    permissions:
-      contents: write
-    needs: build_android
-    runs-on: ubuntu-latest
-    if: github.ref == 'refs/heads/main'
-    outputs:
-      release: ${{ steps.tag_release.outputs.release }}
-      version: ${{ steps.tag_release.outputs.version }}
-    steps:
-      - uses: actions/checkout@v4
-      - name: Setup Node.js 18
-        uses: actions/setup-node@v4
-        with:
-          node-version: 20
-      - uses: pnpm/action-setup@v2
-        name: Install pnpm
-        with:
-          version: 8
-      - name: Install deps
-        run: |
-          pnpm i
-      - name: Tag release
-        id: tag_release
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          npx semantic-release >semantic-release.log
-          cat semantic-release.log
-          if [[ `git tag --points-at HEAD` == "" ]]; then
-            echo "release=False" >> $GITHUB_OUTPUT
-          else
-            echo "release=True" >> $GITHUB_OUTPUT
-            awk '/Published release/ { printf("version=v%s\n",$8) }' semantic-release.log >> $GITHUB_OUTPUT
-          fi
-          echo "Result"
-          cat $GITHUB_OUTPUT
-
-  draft-release:
-    permissions:
-      contents: write
-    needs: semantic-release
-    runs-on: ubuntu-latest
-    if: ${{ needs.semantic-release.outputs.release == 'True' }}
-    steps:
-      - name: download binary artifacts
-        uses: actions/download-artifact@v4
-        with:
-          path: |
-            release
       - name: relase all binary artifacts
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           files: |
-            release/verifier/*
+            verifier.apk
           draft: false
           prerelease: false
           fail_on_unmatched_files: true