From 1f552c2774012daed64e5c66518333597f6a728e Mon Sep 17 00:00:00 2001
From: littlecodedragon <253116839+littlecodedragon@users.noreply.github.com>
Date: Mon, 27 Apr 2026 17:11:18 +0200
Subject: [PATCH] Fix malformed JSON secret files in Forgejo release workflow.

Write secrets via printf and validate with python json.tool so google-services and client secrets remain valid JSON in CI.
---
 .forgejo/workflows/build_release.yml | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/.forgejo/workflows/build_release.yml b/.forgejo/workflows/build_release.yml
index 349726b8a..b009192fb 100755
--- a/.forgejo/workflows/build_release.yml
+++ b/.forgejo/workflows/build_release.yml
@@ -68,18 +68,16 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-          cat > app/google-services.json <<'EOF'
-          ${{ secrets.GOOGLE_SERVICES_JSON }}
-          EOF
+          printf '%s' "${{ secrets.GOOGLE_SERVICES_JSON }}" > app/google-services.json
+          python3 -m json.tool app/google-services.json > /dev/null
 
       - name: Write client_secrets.json
         shell: bash
         run: |
           set -euo pipefail
           mkdir -p app/src/main/assets
-          cat > app/src/main/assets/client_secrets.json <<'EOF'
-          ${{ secrets.GOOGLE_CLIENT_SECRETS_JSON }}
-          EOF
+          printf '%s' "${{ secrets.GOOGLE_CLIENT_SECRETS_JSON }}" > app/src/main/assets/client_secrets.json
+          python3 -m json.tool app/src/main/assets/client_secrets.json > /dev/null
 
       - name: Prepare release metadata
         id: prepare