[AmalJossy]

Summary

Release CI for the RN SDK, adapted to trunk-based development on main. Based on the React Native SDK release CI plan; that doc still describes the development/staging/production model.

• Pins: native-sdk: marker lines in android/build.gradle and the podspec (IOS_SDKS). scripts/apply-native-pins.sh is the only writer.
• native-sdk-bump.yml: one native-sdk-released event per native release, carrying every SDK and variant it released ({platform, channel, pins: {scg: {release, debug}, loans: {...}}, source_url}), or run by hand. The release and the debug variant each get their own branch from main, named after their versions:
  • native staging → prerelease/<platform>-<sdk>-<version>[_<sdk>-<version>], e.g. prerelease/ios-scg-7.3.1-rc.1645_loans-7.6.1-rc.1650 and prerelease/ios-scg-7.3.1-rc-debug.1644_loans-7.6.1-rc-debug.1649.
  • native preview → preview/<platform>-<sdk>-<version>[...].
  • native production → release builds in one PR per platform into main (release/<platform>), so scg + loans from a shared-module change merge together; debug builds on a prerelease/ branch.
• publish.yml (name kept for npm OIDC): release-please on main. Merging the release PR runs pin guard → npm publish. No manual publish any more.
• preview.yml: publishes any branch as X.Y.Z-preview.<run> to GitHub Packages. With native versions as inputs it first pushes preview/<ios-...>__<android-...> (e.g. preview/ios-scg-7.3.1-rc.1645__android-loans-5.5.0-rc-debug.2). Inputs can be release or debug builds.
• iOS from SPM: scripts/fetch-ios-sdks.sh vendors the XCFrameworks (checksum-verified) into ios/Frameworks on prepack. The podspec drops s.dependency 'SCGateway'/'SCLoans'. Loans is pinned at 7.6.0.
• pr-checks.yml on PRs into main: ClickUp link, Conventional Commit title, pin guard, Android compile of the sample app.

Conflicting setup removed or changed

• publish.yml workflow_dispatch (npm publish from any branch) → removed.
• release-it, standard-version (also a runtime dependency!), the release* scripts → removed; yarn.lock pruned.
• lint.yml / sonar-scan.yaml: prod/development → main.
• CONTRIBUTING "Publishing to npm" → describes the new flow.

ClickUp

No task linked

Test Plan

• scripts/fetch-ios-sdks.sh: SCGateway 7.3.0, Loans 7.6.0 (public), and an internal Loans rc; checksums OK
• npm pack --dry-run: ships ios/Frameworks
• Sample pod install: SCGateway/SCLoans pods removed from Podfile.lock
• actionlint, prettier --check
• iOS sample build. Blocked locally: the fmt pod fails on Xcode 26.6 (RN 0.79 consteval issue, not from this change)
• Android compile (CI job)
• After merge: run native-sdk-bump.yml and preview.yml by hand

Notes

Before merging

• main does not exist yet. Create it from prod (ad653f2, v7.7.3), make it the default branch (repository_dispatch and the bump workflow read from the default branch), add it to the branch ruleset, and retarget this PR to main. release-please bootstrap-sha = ad653f2, manifest at 7.7.3.
• case-ci-release-app must be able to read the four iOS SPM repos (the token is minted with owner: smallcase).

Not in this PR: dispatch senders in gw-mob-android / gw-mob-ios (one event per release, after all its builds are published; native preview builds send too); retiring development, staging, production, prod; the read:packages token for internal apps.

🤖 Generated with Claude Code

[isouravganguly]

iOS sample build fails on my Xcode setup (26.3), both default and static linkage. Working on a fix; will post it here by mid-day once confirmed locally.

[isouravganguly]

Fix for the iOS build: ios/** also picks up the xcframework headers, so they compile as our sources ("unsupported Swift architecture" with default linkage, "Multiple commands produce SCGateway-Swift.h" with static).

s.source_files = "ios/*.{h,m,mm,swift}"

Verified locally on 70993ef: sample app builds with default and static linkage, SCGateway and Loans frameworks embedded. Alternative: move Frameworks/ out of ios/ and keep the glob.

[AmalJossy]

Done in 0338ed1: podspec source_files is now ios/*.{h,m,mm,swift}.