Use translations from davx5-translations repository

.github/workflows/build-kdoc.yml

@@ -15,6 +15,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
+        with:
+          submodules: recursive   # translations live in the l10n submodule
       - uses: actions/setup-java@v5.6.0
         with:
           distribution: temurin

.github/workflows/codeql.yml

@@ -10,6 +10,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v7
+      with:
+        submodules: recursive   # translations live in the l10n submodule
 
     - name: Analyze code with CodeQL
       uses: github/codeql-action/analyze@v4.37.3

.github/workflows/mirror-english-strings.yml

@@ -0,0 +1,54 @@
+name: Mirror English strings
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - lib/src/main/res/values/strings.xml
+  workflow_dispatch:
+
+concurrency:
+  group: mirror-english-strings
+  cancel-in-progress: false
+
+jobs:
+  mirror-english-strings:
+    name: Mirror English strings to davx5-translations
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          submodules: recursive   # translations live in the l10n submodule
+
+      - name: Create davx5-translations token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ secrets.TRANSLATIONS_APP_ID }}
+          private-key: ${{ secrets.TRANSLATIONS_APP_PRIVATE_KEY }}
+          owner: ${{ github.repository_owner }}
+          repositories: davx5-translations
+
+      - name: Check out davx5-translations
+        uses: actions/checkout@v7
+        with:
+          repository: ${{ github.repository_owner }}/davx5-translations
+          ref: main
+          path: davx5-translations
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Copy English strings
+        run: cp lib/src/main/res/values/strings.xml davx5-translations/sources/cert4android/strings.xml
+
+      - name: Commit sources/cert4android/strings.xml
+        uses: stefanzweifel/git-auto-commit-action@v7
+        with:
+          repository: davx5-translations
+          branch: main
+          file_pattern: sources/cert4android/strings.xml
+          commit_message: "Mirror English strings (ose) from davx5-ose@${{ github.sha }}"
+          commit_user_name: mirror-original-english-strings[bot]
+          commit_user_email: 316112360+mirror-original-english-strings[bot]@users.noreply.github.com
+          commit_author: mirror-original-english-strings[bot] <316112360+mirror-original-english-strings[bot]@users.noreply.github.com>

.github/workflows/test-dev.yml

@@ -10,6 +10,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
+        with:
+          submodules: recursive   # translations live in the l10n submodule
       - uses: actions/setup-java@v5.6.0
         with:
           distribution: temurin
@@ -25,6 +27,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
+        with:
+          submodules: recursive   # translations live in the l10n submodule
       - uses: actions/setup-java@v5.6.0
         with:
           distribution: temurin

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "l10n"]
+	path = l10n
+	url = https://github.com/bitfireAT/davx5-translations.git

lib/build.gradle.kts

@@ -15,6 +15,10 @@ plugins {
     `maven-publish`
 }
 
+// Translations are maintained in davx5-translations and pulled in as the l10n submodule.
+// The English original strings stay in core/src/main/res/values/strings.xml.
+val translationsDir = file("$rootDir/l10n/translations/cert4android")
+
 android {
     namespace = "at.bitfire.cert4android"
 
@@ -80,6 +84,12 @@ android {
         }
     }
 
+    sourceSets {
+        getByName("main") {
+            res.directories += translationsDir.path
+        }
+    }
+
     publishing {
         // Configure publish variant
         singleVariant("release") {
@@ -128,3 +138,19 @@ dependencies {
 
     testImplementation(libs.junit)
 }
+
+// AGP silently ignores a resource directory that doesn't exist, so a clone without submodules
+// would build a perfectly fine English-only app. Fail such builds instead.
+val verifyTranslations by tasks.registering {
+    val dir = translationsDir   // local copy: the check below must not capture the build script
+
+    doLast {
+        require(!dir.list().isNullOrEmpty()) {
+            "l10n/translations/cert4android is missing or empty.\nRun: git submodule update --init --recursive"
+        }
+    }
+}
+
+tasks.named("preBuild") {
+    dependsOn(verifyTranslations)
+}