ci: add CI, CodeQL and release automation

.github/workflows/ci.yml

@@ -0,0 +1,41 @@
+name: CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  validate:
+    name: Lint, test and build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 24
+          cache: yarn
+
+      # `prepare` runs `expo-module prepare`, so this already builds once.
+      - run: yarn install --frozen-lockfile
+
+      # universe sets most of its rules to `warn`, so without this the step
+      # passes no matter what eslint finds.
+      - run: yarn lint --max-warnings 0
+
+      - run: yarn test
+
+      - run: yarn build
+
+      # `build/` is generated, so the only way to know the published tarball
+      # isn't empty is to pack one.
+      - name: Check the tarball contents
+        run: npm pack --dry-run

.github/workflows/codeql.yml

@@ -0,0 +1,36 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+  schedule:
+    - cron: "38 1 * * 2"
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: ["javascript"]
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:${{ matrix.language }}"

.github/workflows/release.yml

@@ -0,0 +1,72 @@
+name: Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      increment:
+        description: "Version increment. Leave empty to infer it from the conventional commits since the last tag."
+        required: false
+        default: ""
+        type: choice
+        options:
+          - ""
+          - patch
+          - minor
+          - major
+      dry-run:
+        description: "Run release-it without publishing, pushing or tagging."
+        required: false
+        default: false
+        type: boolean
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    name: Publish to npm
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          # conventional-changelog needs the tags and every commit since the
+          # last one to work out the bump and the changelog entries.
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 24
+          cache: yarn
+          registry-url: https://registry.npmjs.org/
+
+      - run: yarn install --frozen-lockfile
+
+      - run: yarn lint --max-warnings 0
+
+      - run: yarn test
+
+      - run: yarn build
+
+      # release-it pushes the version commit and the tag back to master, and
+      # actions/checkout leaves the branch without an upstream to push to.
+      - run: git branch --set-upstream-to=origin/${{ github.ref_name }}
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          INCREMENT: ${{ inputs.increment }}
+          DRY_RUN: ${{ inputs.dry-run }}
+        run: |
+          git config user.email "gabrielstaveira@gmail.com"
+          git config user.name "Gabriel Taveira"
+
+          args="--ci"
+          if [ -n "$INCREMENT" ]; then
+            args="$args --increment=$INCREMENT"
+          fi
+          if [ "$DRY_RUN" = "true" ]; then
+            args="$args --dry-run"
+          fi
+
+          yarn release $args

.gitignore

@@ -1,2 +1,6 @@
 node_modules
-.idea
+.idea
+
+# Generated by `expo-module build`, which the `prepare` script runs on every
+# install and on publish.
+build

CHANGELOG.md

@@ -1,15 +1,39 @@
-### @config-plugins/react-native-codepush 1.0.0
+# Changelog
 
-- Expo SDK 49 support
+## [1.0.8](https://github.com/GSTJ/react-native-code-push-plugin/compare/1.0.7...v1.0.8) (2026-07-25)
+
+### Features
+
+- support self-hosted codepush servers ([#11](https://github.com/GSTJ/react-native-code-push-plugin/issues/11))
+
+### Bug Fixes
+
+- let node resolve the codepush gradle paths ([#12](https://github.com/GSTJ/react-native-code-push-plugin/issues/12))
+
+## [1.0.7](https://github.com/GSTJ/react-native-code-push-plugin/compare/1.0.6...1.0.7) (2024-02-08)
+
+### Bug Fixes
 
-### @config-plugins/react-native-codepush 1.0.2
+- kotlin/java semicolon build error ([#7](https://github.com/GSTJ/react-native-code-push-plugin/issues/7))
 
-- Update interim README
+## 1.0.6 (2024-01-22)
 
-### @config-plugins/react-native-codepush 1.0.6
+### Features
 
-- Expo SDK 50 support
+- Expo SDK 50 support ([#5](https://github.com/GSTJ/react-native-code-push-plugin/issues/5))
 
-### @config-plugins/react-native-codepush 1.0.6
+### Bug Fixes
 
-- Fix SDK 49 build error
+- Expo SDK 49 build error
+
+## 1.0.2 (2023-11-06)
+
+### Documentation
+
+- update the interim README
+
+## 1.0.0 (2023-11-06)
+
+### Features
+
+- Expo SDK 49 support