[pull] master from digitalbitbox:master

.containerversion

@@ -0,0 +1 @@
+27

.github/dependabot.yml

@@ -0,0 +1,11 @@
+---
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -2,132 +2,305 @@
 # https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions
 name: ci
 on: [push, pull_request]
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 env:
-  # Use alternative image when running on GitHub workflows CI to avoid potential
-  # rate limiting when executing jobs in parallel: they can't cache docker images
-  # and always pull.
-  #
-  # To update this image, generate a personal token with write:packages scope
-  # on https://github.com/settings/tokens and authenticate yourself locally with
-  # "docker login ghcr.io -u <github-username>" using the
-  # newly generated token as password.
-  # Once logged in, tag an new image:
-  #   docker tag shiftcrypto/bitbox-wallet-app:VERSION \
-  #     ghcr.io/digitalbitbox/bitbox-wallet-app-ci:VERSION
-  # and push as usual:
-  #   docker push ghcr.io/digitalbitbox/bitbox-wallet-app-ci:VERSION
-  # Lastly, update the next line to use the newly pushed image version.
-  # See docs for more details:
-  # https://docs.github.com/en/packages/guides/pushing-and-pulling-docker-images
-  #
-  # Keep this in sync with default in scripts/travis-ci.sh.
-  CI_IMAGE: ghcr.io/digitalbitbox/bitbox-wallet-app-ci:11
-  TRAVIS_BUILD_DIR: ${{github.workspace}}
+  GITHUB_BUILD_DIR: ${{github.workspace}}
 
 jobs:
+  setup-env:
+    runs-on: ubuntu-22.04
+    outputs:
+      ci_image: ${{ steps.set-ci-image.outputs.ci_image }}
+    steps:
+      - name: Clone the repo
+        uses: actions/checkout@v4
+
+      - name: Read CI Image Version
+        id: set-ci-image
+        run: |
+          # Use alternative image when running on GitHub workflows CI to avoid potential
+          # rate limiting when executing jobs in parallel: they can't cache docker images
+          # and always pull.
+          #
+          # To update this image, generate a personal token with write:packages scope
+          # on https://github.com/settings/tokens and authenticate yourself locally with
+          # "docker login ghcr.io -u <github-username>" using the
+          # newly generated token as password.
+          # Once logged in, tag an new image:
+          #   docker tag shiftcrypto/bitbox-wallet-app:VERSION \
+          #     ghcr.io/bitboxswiss/bitbox-wallet-app-ci:VERSION
+          # and push as usual:
+          #   docker push ghcr.io/bitboxswiss/bitbox-wallet-app-ci:VERSION
+          # Lastly, update the next line to use the newly pushed image version.
+          # See docs for more details:
+          # https://docs.github.com/en/packages/guides/pushing-and-pulling-docker-images
+          #
+          # Keep this in sync with default in scripts/github-ci.sh.
+          CI_IMAGE_VERSION=$(cat .containerversion)
+          echo "ci_image=ghcr.io/bitboxswiss/bitbox-wallet-app-ci:$CI_IMAGE_VERSION" >> $GITHUB_OUTPUT
+
   test-lint:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
+    needs: setup-env
     steps:
       - name: Clone the repo
         with:
           submodules: recursive
-        uses: actions/checkout@v2
-      - name: Enable caching
-        uses: actions/cache@v2
-        with:
-          key: ${{runner.os}}-test-lint
-          path: frontends/web/node_modules
+        uses: actions/checkout@v4
       - name: Run CI script
         # The script also runs golang-ci but it's ok: doesn't take too long and may be useful
         # to keep its linter errors in this log, too.
-        run: ./scripts/travis-ci.sh ci
+        run: ./scripts/github-ci.sh ci
         env:
-          TRAVIS_OS_NAME: linux
+          OS_NAME: linux
+          CI_IMAGE: ${{ needs.setup-env.outputs.ci_image }}
+
   android:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
+    needs: setup-env
+    outputs:
+      artifact-url: ${{ steps.upload.outputs.artifact-url }}
     steps:
       - name: Clone the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Enable caching
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         with:
           key: ${{runner.os}}-android
           path: |
-            frontends/web/node_modules
             ~/.gradle/caches
             ~/.gradle/wrapper
       - name: Build Android
-        run: ./scripts/travis-ci.sh android
+        run: ./scripts/github-ci.sh android
         env:
-          TRAVIS_OS_NAME: linux
+          OS_NAME: linux
+          CI_IMAGE: ${{ needs.setup-env.outputs.ci_image }}
       - name: Upload APK
-        uses: actions/upload-artifact@v2
+        id: upload
+        uses: actions/upload-artifact@v4
         with:
           path: frontends/android/BitBoxApp/app/build/outputs/apk/debug/app-debug.apk
           name: BitBoxApp-android-${{github.sha}}.apk
+          if-no-files-found: error
   qt-linux:
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
+    needs: setup-env
+    outputs:
+      artifact-url-ai: ${{ steps.upload-ai.outputs.artifact-url }}
+      artifact-url-deb: ${{ steps.upload-deb.outputs.artifact-url }}
+      artifact-url-rpm: ${{ steps.upload-rpm.outputs.artifact-url }}
     steps:
       - name: Clone the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           submodules: recursive
-      - name: Enable caching
-        uses: actions/cache@v2
-        with:
-          key: ${{runner.os}}-qt-linux
-          path: frontends/web/node_modules
       - name: Build Qt-Linux
-        run: ./scripts/travis-ci.sh qt-linux
+        run: ./scripts/github-ci.sh qt-linux
         env:
-          TRAVIS_OS_NAME: linux
+          OS_NAME: linux
+          CI_IMAGE: ${{ needs.setup-env.outputs.ci_image }}
       - name: Upload AppImage
-        uses: actions/upload-artifact@v2
+        id: upload-ai
+        uses: actions/upload-artifact@v4
         with:
           path: frontends/qt/build/linux/BitBoxApp-*.AppImage
           name: BitBoxApp-linux-${{github.sha}}.AppImage
+          if-no-files-found: error
       - name: Upload deb
-        uses: actions/upload-artifact@v2
+        id: upload-deb
+        uses: actions/upload-artifact@v4
         with:
           path: frontends/qt/build/linux/bitbox_*.deb
           name: BitBoxApp-linux-${{github.sha}}.deb
+          if-no-files-found: error
       - name: Upload rpm
-        uses: actions/upload-artifact@v2
+        id: upload-rpm
+        uses: actions/upload-artifact@v4
         with:
           path: frontends/qt/build/linux/bitbox-*.rpm
           name: BitBoxApp-linux-${{github.sha}}.rpm
+          if-no-files-found: error
   macos:
-    runs-on: macos-10.15
+    runs-on: macos-13
+    outputs:
+      artifact-url: ${{ steps.upload.outputs.artifact-url }}
     steps:
       - name: Clone the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           submodules: recursive
-      - name: Enable caching
-        uses: actions/cache@v2
-        with:
-          # The key version is just an incremental number.
-          # Bump it every time there are changes in CI scripts.
-          key: ${{runner.os}}-qt-osx-v2
-          path: |
-            frontends/web/node_modules
-            ~/Library/Caches/Homebrew
       - name: Install Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v5
+        with:
+          go-version: 1.23.x
+      - name: Install Node.js
+        uses: actions/setup-node@v4
         with:
-          go-version: 1.16.x
+          node-version: '20.x'
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.x'
+      - name: Install Qt
+        # Qt modules: Not sure why we need qtpositioning - app compilation fails without. Maybe the webengine depends on it.
+        # qtpositioning depends on qtserialport.
+        # qtwebchannel is for the JS/backend bridge.
+        # qtwebengine is for rendering the frontend.
+        run: |
+          pip install aqtinstall
+          aqt install-qt mac desktop 6.2.4 --modules qtpositioning qtserialport qtwebchannel qtwebengine --outputdir ~/Qt
+          echo "$HOME/Qt/6.2.4/macos/bin" >> $GITHUB_PATH
+          echo "$HOME/Qt/6.2.4/macos/libexec" >> $GITHUB_PATH
       - name: Build macOS app
         run: >
-          ./scripts/travis-ci.sh qt-osx;
+          ./scripts/github-ci.sh qt-osx;
         env:
-          TRAVIS_OS_NAME: osx
+          OS_NAME: osx
       - name: Archive app
         run: >
-          pushd ~/go/src/github.com/digitalbitbox/bitbox-wallet-app/frontends/qt/build/osx;
+          pushd ~/go/src/github.com/BitBoxSwiss/bitbox-wallet-app/frontends/qt/build/osx;
           ditto -c -k --keepParent BitBox.app ${{github.workspace}}/BitBoxApp-macos.zip;
           popd;
       - name: Upload app
-        uses: actions/upload-artifact@v2
+        id: upload
+        uses: actions/upload-artifact@v4
         with:
           path: BitBoxApp-macos.zip
           name: BitBoxApp-macos-${{github.sha}}.zip
+          if-no-files-found: error
+  ios:
+    runs-on: macos-14
+    env:
+      GO_SRC_DIR: src/github.com/BitBoxSwiss/bitbox-wallet-app
+    steps:
+      - name: Clone the repo
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          # Take Go version to install from go.mod.
+          go-version-file: 'go.mod'
+      - name: Set GOPATH
+        run: |
+          echo "GOPATH=$(go env GOPATH)" >> $GITHUB_ENV
+      - name: Copy repo to GOPATH
+        # This is needed as gomobile is still unaware of go modules, so the repo must be in GOPATH
+        run: |
+          mkdir -p $GOPATH/$(dirname $GO_SRC_DIR)
+          cp -a ${{github.workspace}} $GOPATH/$(dirname $GO_SRC_DIR)
+      - name: Install Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20.x'
+      - name: Build iOS app
+        run: |
+          make gomobileinit
+          (cd $GOPATH/$GO_SRC_DIR; make ios)
+  windows:
+    runs-on: windows-2019
+    outputs:
+      artifact-url: ${{ steps.upload.outputs.artifact-url }}
+    defaults:
+      run:
+        shell: bash
+    env:
+      MINGW_BIN: /C/mingw64/bin
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+      - name: Install Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20.x'
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          # Take Go version to install from go.mod
+          go-version-file: 'go.mod'
+      - name: Install Qt
+        uses: jurplel/install-qt-action@v4
+        with:
+          version: '6.2'
+          host: 'windows'
+          target: 'desktop'
+          arch: 'win64_msvc2019_64'
+          modules: 'qtwebengine qtwebchannel qtpositioning'
+      - name: Link Visual Studio editions
+        # This is needed due to our build expecting the Community edition, but Enterprise being pre-installed
+        shell: cmd
+        run: |
+          mklink /J "C:\Program Files (x86)\Microsoft Visual Studio\2019\Community" "C:\Program Files (x86)\Microsoft Visual Studio\2019\Enterprise"
+      - name: Build Windows app
+        run: |
+          make qt-windows
+          cd frontends/qt
+          makensis setup.nsi
+      - name: Upload Installer
+        id: upload
+        uses: actions/upload-artifact@v4
+        with:
+          path: frontends/qt/BitBox-installer.exe
+          name: BitBoxApp-windows-${{ github.sha }}.exe
+          if-no-files-found: error
+
+  report-artifacts:
+    needs: [android, qt-linux, macos, windows]
+    runs-on: ubuntu-22.04
+    if: ${{ !cancelled() && github.event_name == 'push' }}
+    steps:
+      - name: Clone the repo
+        uses: actions/checkout@v4
+      - name: Create vars
+        id: vars
+        run: |
+          echo "git_sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+      - name: Message for success
+        uses: mattermost/action-mattermost-notify@master
+        continue-on-error: true
+        if: job.status == 'success'
+        with:
+          MATTERMOST_WEBHOOK_URL: ${{ secrets.MM_WEBHOOK_URL }}
+          MATTERMOST_ICON_URL: https://cdn4.iconfinder.com/data/icons/basic-ui-2-line/32/check-mark-checklist-complete-done-512.png
+          MATTERMOST_CHANNEL: eng-artifacts
+          TEXT: |
+            **New artifacts built**
+            ([${{ github.ref_name }}](https://github.com/${{ github.repository }}/tree/${{ github.ref_name }}), [${{ steps.vars.outputs.git_sha_short }}](https://github.com/${{ github.repository }}/commit/${{ github.sha }}), [artifacts](https://github.com/${{ github.repository }}/actions/runs/${{github.run_id}}#artifacts))
+            * Android - [APK](${{needs.android.outputs.artifact-url}})
+            * Linux - [AppImage](${{needs.qt-linux.outputs.artifact-url-ai}}), [DEB](${{needs.qt-linux.outputs.artifact-url-deb}}), [RPM](${{needs.qt-linux.outputs.artifact-url-rpm}})
+            * MacOS - [Zip](${{needs.macos.outputs.artifact-url}})
+            * Windows - [EXE](${{needs.windows.outputs.artifact-url}})
+
+      - name: Message for failure
+        uses: mattermost/action-mattermost-notify@master
+        continue-on-error: true
+        if: job.status == 'failure'
+        with:
+          MATTERMOST_WEBHOOK_URL: ${{ secrets.MM_WEBHOOK_URL }}
+          MATTERMOST_ICON_URL: https://cdn4.iconfinder.com/data/icons/basic-ui-2-line/32/exclamation-mark-triangle-sign-caution-1024.png
+          MATTERMOST_CHANNEL: eng-build-failures
+          TEXT: |
+            **Oh no! [${{ steps.vars.outputs.git_sha_short }}](https://github.com/${{ github.repository }}/commit/${{ github.sha }}) failed to build.**
+            See [run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}) for more details.
+  bitbox02-simulator:
+    # This is a separate job because the simulator runs on Ubuntu 22.04+, while the
+    # Docker CI image is still on Ubuntu 20.04 (the min supported version for BitBoxApp).
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Clone the repo
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: 'go.mod'
+      - name: Run simulator tests
+        run: |
+          go test -mod=vendor -tags=bitbox02_simulator ./... -count=1 -v -run 'TestSimulator*'