v11.0.1

* [eas-cli] make eas config command not require authentication when running in --eas-json-only  mode

* add changelog

.eslintignore

@@ -5,3 +5,4 @@
 packages/eas-cli/src/graphql/generated.ts
 
 node_modules
+ts-declarations

.eslintrc.js

@@ -30,12 +30,6 @@ module.exports = {
       },
     ],
     'no-underscore-dangle': ['error', { allow: ['__typename'] }],
-    '@typescript-eslint/explicit-function-return-type': [
-      'warn',
-      {
-        allowExpressions: true,
-      },
-    ],
     'async-protect/async-suffix': 'error',
     'node/no-sync': 'error',
   },

CHANGELOG.md

@@ -10,8 +10,28 @@ This is the log of notable changes to EAS CLI and related packages.
 
 ### 🐛 Bug fixes
 
+- Make `eas config` command not require authentication when running in `--eas-json-only` mode. ([#2517](https://github.com/expo/eas-cli/pull/2517) by [@szdziedzic](https://github.com/szdziedzic))
+
 ### 🧹 Chores
 
+## [11.0.0](https://github.com/expo/eas-cli/releases/tag/v11.0.0) - 2024-08-26
+
+### 🛠 Breaking changes
+
+- Remove long-deprecated `eas update` flags. ([#2501](https://github.com/expo/eas-cli/pull/2501) by [@wschurman](https://github.com/wschurman))
+
+### 🎉 New features
+
+- Add new rollout update type for `eas update` and `eas update:edit`. ([#2502](https://github.com/expo/eas-cli/pull/2502), [#2503](https://github.com/expo/eas-cli/pull/2503) by [@wschurman](https://github.com/wschurman))
+
+### 🧹 Chores
+
+- Upgrade packages to SDK 51 release. ([#2498](https://github.com/expo/eas-cli/pull/2498) by [@wschurman](https://github.com/wschurman))
+- Enable typescript linting and various lint rules. ([#2505](https://github.com/expo/eas-cli/pull/2505), [#2507](https://github.com/expo/eas-cli/pull/2507), [#2508](https://github.com/expo/eas-cli/pull/2508), [#2509](https://github.com/expo/eas-cli/pull/2509), [#2510](https://github.com/expo/eas-cli/pull/2510) by [@wschurman](https://github.com/wschurman))
+- Include debug info in fingerprint metadata during build. ([#2513](https://github.com/expo/eas-cli/pull/2513) by [@wschurman](https://github.com/wschurman))
+
+## [10.2.4](https://github.com/expo/eas-cli/releases/tag/v10.2.4) - 2024-08-19
+
 ## [10.2.3](https://github.com/expo/eas-cli/releases/tag/v10.2.3) - 2024-08-13
 
 ### 🧹 Chores

lerna.json

@@ -1,5 +1,5 @@
 {
   "npmClient": "yarn",
-  "version": "10.2.4",
+  "version": "11.0.1",
   "$schema": "node_modules/lerna/schemas/lerna-schema.json"
 }

package.json

@@ -23,7 +23,7 @@
     "@types/jest": "29.5.11",
     "@types/node": "20.11.0",
     "eslint": "8.56.0",
-    "eslint-config-universe": "12.0.0",
+    "eslint-config-universe": "13.0.0",
     "eslint-plugin-async-protect": "3.1.0",
     "eslint-plugin-node": "11.1.0",
     "jest": "29.7.0",

packages/eas-cli/README.md

@@ -143,7 +143,7 @@ ALIASES
   $ eas login
 ```
 
-_See code: [packages/eas-cli/src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/account/login.ts)_
+_See code: [packages/eas-cli/src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/account/login.ts)_
 
 ## `eas account:logout`
 
@@ -160,7 +160,7 @@ ALIASES
   $ eas logout
 ```
 
-_See code: [packages/eas-cli/src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/account/logout.ts)_
+_See code: [packages/eas-cli/src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/account/logout.ts)_
 
 ## `eas account:view`
 
@@ -177,7 +177,7 @@ ALIASES
   $ eas whoami
 ```
 
-_See code: [packages/eas-cli/src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/account/view.ts)_
+_See code: [packages/eas-cli/src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/account/view.ts)_
 
 ## `eas analytics [STATUS]`
 
@@ -191,7 +191,7 @@ DESCRIPTION
   display or change analytics settings
 ```
 
-_See code: [packages/eas-cli/src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/analytics.ts)_
+_See code: [packages/eas-cli/src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/analytics.ts)_
 
 ## `eas autocomplete [SHELL]`
 
@@ -243,7 +243,7 @@ DESCRIPTION
   create a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/branch/create.ts)_
+_See code: [packages/eas-cli/src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/create.ts)_
 
 ## `eas branch:delete [NAME]`
 
@@ -264,7 +264,7 @@ DESCRIPTION
   delete a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/branch/delete.ts)_
+_See code: [packages/eas-cli/src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/delete.ts)_
 
 ## `eas branch:list`
 
@@ -284,7 +284,7 @@ DESCRIPTION
   list all branches
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/branch/list.ts)_
+_See code: [packages/eas-cli/src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/list.ts)_
 
 ## `eas branch:rename`
 
@@ -304,7 +304,7 @@ DESCRIPTION
   rename a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/branch/rename.ts)_
+_See code: [packages/eas-cli/src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/rename.ts)_
 
 ## `eas branch:view [NAME]`
 
@@ -327,7 +327,7 @@ DESCRIPTION
   view a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/branch/view.ts)_
+_See code: [packages/eas-cli/src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/view.ts)_
 
 ## `eas build`
 
@@ -364,7 +364,7 @@ DESCRIPTION
   start a build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/index.ts)_
+_See code: [packages/eas-cli/src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/index.ts)_
 
 ## `eas build:cancel [BUILD_ID]`
 
@@ -383,7 +383,7 @@ DESCRIPTION
   cancel a build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/cancel.ts)_
+_See code: [packages/eas-cli/src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/cancel.ts)_
 
 ## `eas build:configure`
 
@@ -400,7 +400,7 @@ DESCRIPTION
   configure the project to support EAS Build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/configure.ts)_
+_See code: [packages/eas-cli/src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/configure.ts)_
 
 ## `eas build:delete [BUILD_ID]`
 
@@ -419,7 +419,7 @@ DESCRIPTION
   delete a build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/delete.ts)_
+_See code: [packages/eas-cli/src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/delete.ts)_
 
 ## `eas build:inspect`
 
@@ -454,7 +454,7 @@ DESCRIPTION
   inspect the state of the project at specific build stages, useful for troubleshooting
 ```
 
-_See code: [packages/eas-cli/src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/inspect.ts)_
+_See code: [packages/eas-cli/src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/inspect.ts)_
 
 ## `eas build:list`
 
@@ -504,7 +504,7 @@ DESCRIPTION
   list all builds for your project
 ```
 
-_See code: [packages/eas-cli/src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/list.ts)_
+_See code: [packages/eas-cli/src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/list.ts)_
 
 ## `eas build:resign`
 
@@ -533,7 +533,7 @@ DESCRIPTION
   re-sign a build archive
 ```
 
-_See code: [packages/eas-cli/src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/resign.ts)_
+_See code: [packages/eas-cli/src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/resign.ts)_
 
 ## `eas build:run`
 
@@ -559,7 +559,7 @@ DESCRIPTION
   run simulator/emulator builds from eas-cli
 ```
 
-_See code: [packages/eas-cli/src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/run.ts)_
+_See code: [packages/eas-cli/src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/run.ts)_
 
 ## `eas build:submit`
 
@@ -609,7 +609,7 @@ DESCRIPTION
   get the latest version from EAS servers
 ```
 
-_See code: [packages/eas-cli/src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/version/get.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/version/get.ts)_
 
 ## `eas build:version:set`
 
@@ -628,7 +628,7 @@ DESCRIPTION
   update version of an app
 ```
 
-_See code: [packages/eas-cli/src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/version/set.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/version/set.ts)_
 
 ## `eas build:version:sync`
 
@@ -647,7 +647,7 @@ DESCRIPTION
   update a version in native code with a value stored on EAS servers
 ```
 
-_See code: [packages/eas-cli/src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/version/sync.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/version/sync.ts)_
 
 ## `eas build:view [BUILD_ID]`
 
@@ -664,7 +664,7 @@ DESCRIPTION
   view a build for your project
 ```
 
-_See code: [packages/eas-cli/src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/build/view.ts)_
+_See code: [packages/eas-cli/src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/view.ts)_
 
 ## `eas channel:create [NAME]`
 
@@ -685,7 +685,7 @@ DESCRIPTION
   create a channel
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/channel/create.ts)_
+_See code: [packages/eas-cli/src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/create.ts)_
 
 ## `eas channel:edit [NAME]`
 
@@ -707,7 +707,7 @@ DESCRIPTION
   point a channel at a new branch
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/channel/edit.ts)_
+_See code: [packages/eas-cli/src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/edit.ts)_
 
 ## `eas channel:list`
 
@@ -727,7 +727,7 @@ DESCRIPTION
   list all channels
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/channel/list.ts)_
+_See code: [packages/eas-cli/src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/list.ts)_
 
 ## `eas channel:rollout [CHANNEL]`
 
@@ -760,7 +760,7 @@ DESCRIPTION
   Roll a new branch out on a channel incrementally.
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/channel/rollout.ts)_
+_See code: [packages/eas-cli/src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/rollout.ts)_
 
 ## `eas channel:view [NAME]`
 
@@ -783,7 +783,7 @@ DESCRIPTION
   view a channel
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/channel/view.ts)_
+_See code: [packages/eas-cli/src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/view.ts)_
 
 ## `eas config`
 
@@ -804,7 +804,7 @@ DESCRIPTION
   display project configuration (app.json + eas.json)
 ```
 
-_See code: [packages/eas-cli/src/commands/config.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/config.ts)_
+_See code: [packages/eas-cli/src/commands/config.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/config.ts)_
 
 ## `eas credentials`
 
@@ -821,7 +821,7 @@ DESCRIPTION
   manage credentials
 ```
 
-_See code: [packages/eas-cli/src/commands/credentials/index.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/credentials/index.ts)_
+_See code: [packages/eas-cli/src/commands/credentials/index.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/credentials/index.ts)_
 
 ## `eas credentials:configure-build`
 
@@ -839,7 +839,7 @@ DESCRIPTION
   Set up credentials for building your project.
 ```
 
-_See code: [packages/eas-cli/src/commands/credentials/configure-build.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/credentials/configure-build.ts)_
+_See code: [packages/eas-cli/src/commands/credentials/configure-build.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/credentials/configure-build.ts)_
 
 ## `eas device:create`
 
@@ -853,7 +853,7 @@ DESCRIPTION
   register new Apple Devices to use for internal distribution
 ```
 
-_See code: [packages/eas-cli/src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/device/create.ts)_
+_See code: [packages/eas-cli/src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/create.ts)_
 
 ## `eas device:delete`
 
@@ -873,7 +873,7 @@ DESCRIPTION
   remove a registered device from your account
 ```
 
-_See code: [packages/eas-cli/src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/device/delete.ts)_
+_See code: [packages/eas-cli/src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/delete.ts)_
 
 ## `eas device:list`
 
@@ -894,7 +894,7 @@ DESCRIPTION
   list all registered devices for your account
 ```
 
-_See code: [packages/eas-cli/src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/device/list.ts)_
+_See code: [packages/eas-cli/src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/list.ts)_
 
 ## `eas device:rename`
 
@@ -915,7 +915,7 @@ DESCRIPTION
   rename a registered device
 ```
 
-_See code: [packages/eas-cli/src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/device/rename.ts)_
+_See code: [packages/eas-cli/src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/rename.ts)_
 
 ## `eas device:view [UDID]`
 
@@ -929,7 +929,7 @@ DESCRIPTION
   view a device for your project
 ```
 
-_See code: [packages/eas-cli/src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/device/view.ts)_
+_See code: [packages/eas-cli/src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/view.ts)_
 
 ## `eas diagnostics`
 
@@ -943,7 +943,7 @@ DESCRIPTION
   display environment info
 ```
 
-_See code: [packages/eas-cli/src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/diagnostics.ts)_
+_See code: [packages/eas-cli/src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/diagnostics.ts)_
 
 ## `eas help [COMMAND]`
 
@@ -1050,7 +1050,7 @@ DESCRIPTION
   validate the local store configuration
 ```
 
-_See code: [packages/eas-cli/src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/metadata/lint.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/metadata/lint.ts)_
 
 ## `eas metadata:pull`
 
@@ -1067,7 +1067,7 @@ DESCRIPTION
   generate the local store configuration from the app stores
 ```
 
-_See code: [packages/eas-cli/src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/metadata/pull.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/metadata/pull.ts)_
 
 ## `eas metadata:push`
 
@@ -1084,7 +1084,7 @@ DESCRIPTION
   sync the local store configuration to the app stores
 ```
 
-_See code: [packages/eas-cli/src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/metadata/push.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/metadata/push.ts)_
 
 ## `eas onboarding [TARGET_PROJECT_DIRECTORY]`
 
@@ -1114,7 +1114,7 @@ DESCRIPTION
   open the project page in a web browser
 ```
 
-_See code: [packages/eas-cli/src/commands/open.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/open.ts)_
+_See code: [packages/eas-cli/src/commands/open.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/open.ts)_
 
 ## `eas project:info`
 
@@ -1128,7 +1128,7 @@ DESCRIPTION
   information about the current project
 ```
 
-_See code: [packages/eas-cli/src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/project/info.ts)_
+_See code: [packages/eas-cli/src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/project/info.ts)_
 
 ## `eas project:init`
 
@@ -1150,7 +1150,7 @@ ALIASES
   $ eas init
 ```
 
-_See code: [packages/eas-cli/src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/project/init.ts)_
+_See code: [packages/eas-cli/src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/project/init.ts)_
 
 ## `eas project:onboarding [TARGET_PROJECT_DIRECTORY]`
 
@@ -1168,7 +1168,7 @@ ALIASES
   $ eas onboarding
 ```
 
-_See code: [packages/eas-cli/src/commands/project/onboarding.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/project/onboarding.ts)_
+_See code: [packages/eas-cli/src/commands/project/onboarding.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/project/onboarding.ts)_
 
 ## `eas secret:create`
 
@@ -1191,7 +1191,7 @@ DESCRIPTION
   create an environment secret on the current project or owner account
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/secret/create.ts)_
+_See code: [packages/eas-cli/src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/create.ts)_
 
 ## `eas secret:delete`
 
@@ -1209,7 +1209,7 @@ DESCRIPTION
   delete an environment secret by ID
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/secret/delete.ts)_
+_See code: [packages/eas-cli/src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/delete.ts)_
 
 ## `eas secret:list`
 
@@ -1223,7 +1223,7 @@ DESCRIPTION
   list environment secrets available for your current app
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/secret/list.ts)_
+_See code: [packages/eas-cli/src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/list.ts)_
 
 ## `eas secret:push`
 
@@ -1243,7 +1243,7 @@ DESCRIPTION
   read environment secrets from env file and store on the server
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/secret/push.ts)_
+_See code: [packages/eas-cli/src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/push.ts)_
 
 ## `eas submit`
 
@@ -1274,7 +1274,7 @@ ALIASES
   $ eas build:submit
 ```
 
-_See code: [packages/eas-cli/src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/submit.ts)_
+_See code: [packages/eas-cli/src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/submit.ts)_
 
 ## `eas update`
 
@@ -1282,9 +1282,9 @@ publish an update group
 
 ```
 USAGE
-  $ eas update [--branch <value>] [--channel <value>] [-m <value>] [--republish | --input-dir <value> |
-    --skip-bundler] [--group <value> |  | ] [--clear-cache] [--emit-metadata] [-p android|ios|all] [--auto]
-    [--private-key-path <value>] [--json --non-interactive]
+  $ eas update [--branch <value>] [--channel <value>] [-m <value>] [--input-dir <value>] [--skip-bundler]
+    [--clear-cache] [--emit-metadata] [-p android|ios|all] [--auto] [--private-key-path <value>] [--json
+    --non-interactive]
 
 FLAGS
   -m, --message=<value>             A short message describing the update
@@ -1295,7 +1295,6 @@ FLAGS
   --clear-cache                     Clear the bundler cache before publishing
   --emit-metadata                   Emit "eas-update-metadata.json" in the bundle folder with detailed information about
                                     the generated updates
-  --group=<value>                   Update group to republish (deprecated, see republish command)
   --input-dir=<value>               [default: dist] Location of the bundle
   --json                            Enable JSON output, non-JSON messages will be printed to stderr.
   --non-interactive                 Run the command in non-interactive mode.
@@ -1303,14 +1302,13 @@ FLAGS
                                     expo-updates' configuration. Defaults to a file named "private-key.pem" in the
                                     certificate's directory. Only relevant if you are using code signing:
                                     https://docs.expo.dev/eas-update/code-signing/
-  --republish                       Republish an update group (deprecated, see republish command)
   --skip-bundler                    Skip running Expo CLI to bundle the app before publishing
 
 DESCRIPTION
   publish an update group
 ```
 
-_See code: [packages/eas-cli/src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/index.ts)_
+_See code: [packages/eas-cli/src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/index.ts)_
 
 ## `eas update:configure`
 
@@ -1328,7 +1326,7 @@ DESCRIPTION
   configure the project to support EAS Update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/configure.ts)_
+_See code: [packages/eas-cli/src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/configure.ts)_
 
 ## `eas update:delete GROUPID`
 
@@ -1349,7 +1347,7 @@ DESCRIPTION
   delete all the updates in an update group
 ```
 
-_See code: [packages/eas-cli/src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/delete.ts)_
+_See code: [packages/eas-cli/src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/delete.ts)_
 
 ## `eas update:list`
 
@@ -1371,7 +1369,7 @@ DESCRIPTION
   view the recent updates
 ```
 
-_See code: [packages/eas-cli/src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/list.ts)_
+_See code: [packages/eas-cli/src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/list.ts)_
 
 ## `eas update:republish`
 
@@ -1399,7 +1397,7 @@ DESCRIPTION
   roll back to an existing update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/republish.ts)_
+_See code: [packages/eas-cli/src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/republish.ts)_
 
 ## `eas update:roll-back-to-embedded`
 
@@ -1427,7 +1425,7 @@ DESCRIPTION
   roll back to the embedded update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/roll-back-to-embedded.ts)_
+_See code: [packages/eas-cli/src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/roll-back-to-embedded.ts)_
 
 ## `eas update:rollback`
 
@@ -1447,7 +1445,7 @@ DESCRIPTION
   roll back to an embedded update or an existing update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/rollback.ts)_
+_See code: [packages/eas-cli/src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/rollback.ts)_
 
 ## `eas update:view GROUPID`
 
@@ -1467,7 +1465,7 @@ DESCRIPTION
   update group details
 ```
 
-_See code: [packages/eas-cli/src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/update/view.ts)_
+_See code: [packages/eas-cli/src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/view.ts)_
 
 ## `eas webhook:create`
 
@@ -1488,7 +1486,7 @@ DESCRIPTION
   create a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/webhook/create.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/create.ts)_
 
 ## `eas webhook:delete [ID]`
 
@@ -1508,7 +1506,7 @@ DESCRIPTION
   delete a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/webhook/delete.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/delete.ts)_
 
 ## `eas webhook:list`
 
@@ -1526,7 +1524,7 @@ DESCRIPTION
   list webhooks
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/webhook/list.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/list.ts)_
 
 ## `eas webhook:update`
 
@@ -1548,7 +1546,7 @@ DESCRIPTION
   update a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/webhook/update.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/update.ts)_
 
 ## `eas webhook:view ID`
 
@@ -1565,7 +1563,7 @@ DESCRIPTION
   view a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v10.2.4/packages/eas-cli/src/commands/webhook/view.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/view.ts)_
 
 ## `eas whoami`
 

packages/eas-cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "eas-cli",
   "description": "EAS command line tool",
-  "version": "10.2.4",
+  "version": "11.0.1",
   "author": "Expo <[email protected]>",
   "bin": {
     "eas": "./bin/run"
@@ -10,24 +10,24 @@
   "dependencies": {
     "@expo/apple-utils": "1.7.1",
     "@expo/code-signing-certificates": "0.0.5",
-    "@expo/config": "8.5.4",
-    "@expo/config-plugins": "7.8.4",
-    "@expo/config-types": "50.0.0",
-    "@expo/eas-build-job": "1.0.130",
-    "@expo/eas-json": "10.2.4",
-    "@expo/json-file": "8.2.37",
+    "@expo/config": "9.0.3",
+    "@expo/config-plugins": "8.0.8",
+    "@expo/config-types": "51.0.2",
+    "@expo/eas-build-job": "1.0.133",
+    "@expo/eas-json": "11.0.0",
+    "@expo/json-file": "8.3.3",
     "@expo/logger": "1.0.117",
     "@expo/multipart-body-parser": "1.1.0",
-    "@expo/osascript": "2.0.33",
-    "@expo/package-manager": "1.1.2",
-    "@expo/pkcs12": "0.0.8",
-    "@expo/plist": "0.0.20",
+    "@expo/osascript": "2.1.3",
+    "@expo/package-manager": "1.5.2",
+    "@expo/pkcs12": "0.1.2",
+    "@expo/plist": "0.1.3",
     "@expo/plugin-help": "5.1.23",
     "@expo/plugin-warn-if-update-available": "2.5.1",
-    "@expo/prebuild-config": "6.7.3",
+    "@expo/prebuild-config": "7.0.8",
     "@expo/results": "1.0.0",
     "@expo/rudder-sdk-node": "1.1.1",
-    "@expo/spawn-async": "1.7.0",
+    "@expo/spawn-async": "1.7.2",
     "@expo/steps": "1.0.130",
     "@expo/timeago.js": "1.0.0",
     "@oclif/core": "^1.26.2",

packages/eas-cli/src/.eslintrc.js

@@ -0,0 +1,40 @@
+module.exports = {
+  extends: ['universe/shared/typescript-analysis'],
+  overrides: [
+    {
+      files: ['*.ts', '*.d.ts'],
+      parserOptions: {
+        project: './packages/eas-cli/tsconfig.json',
+      },
+      rules: {
+        '@typescript-eslint/explicit-function-return-type': [
+          'warn',
+          {
+            allowExpressions: true,
+          },
+        ],
+        '@typescript-eslint/prefer-nullish-coalescing': ['warn', { ignorePrimitives: true }],
+        '@typescript-eslint/no-confusing-void-expression': 'warn',
+        '@typescript-eslint/await-thenable': 'error',
+        '@typescript-eslint/no-misused-promises': [
+          'error',
+          {
+            checksVoidReturn: false,
+          },
+        ],
+        '@typescript-eslint/no-floating-promises': 'error',
+        'no-void': ['warn', { allowAsStatement: true }],
+        'no-return-await': 'off',
+        '@typescript-eslint/return-await': ['error', 'always'],
+        '@typescript-eslint/no-confusing-non-null-assertion': 'warn',
+        '@typescript-eslint/no-extra-non-null-assertion': 'warn',
+        '@typescript-eslint/prefer-as-const': 'warn',
+        '@typescript-eslint/prefer-includes': 'warn',
+        '@typescript-eslint/prefer-readonly': 'warn',
+        '@typescript-eslint/prefer-string-starts-ends-with': 'warn',
+        '@typescript-eslint/prefer-ts-expect-error': 'warn',
+        '@typescript-eslint/no-unnecessary-type-assertion': 'warn',
+      },
+    },
+  ],
+};

packages/eas-cli/src/branch/actions/SelectBranch.ts

@@ -28,7 +28,7 @@ import {
  */
 export class SelectBranch implements EASUpdateAction<UpdateBranchBasicInfoFragment | null> {
   constructor(
-    private options: {
+    private readonly options: {
       filterPredicate?: (branchInfo: UpdateBranchBasicInfoFragment) => boolean;
       printedType?: string;
       pageSize?: number;
@@ -91,8 +91,8 @@ export class SelectBranch implements EASUpdateAction<UpdateBranchBasicInfoFragme
       queryParams: QueryParams
     ): Promise<Connection<UpdateBranchBasicInfoFragment>> =>
       filterPredicate
-        ? this.filterQueryAsync(ctx, queryParams, filterPredicate)
-        : this.queryAsync(ctx, queryParams);
+        ? await this.filterQueryAsync(ctx, queryParams, filterPredicate)
+        : await this.queryAsync(ctx, queryParams);
 
     const getTitleAsync = async (branchInfo: UpdateBranchBasicInfoFragment): Promise<string> =>
       branchInfo.name;

packages/eas-cli/src/branch/queries.ts

@@ -84,7 +84,9 @@ export async function listAndRenderBranchesOnAppAsync(
         queryBranchesOnProjectAsync(graphqlClient, limit, offset, projectId),
       promptOptions: {
         title: 'Load more branches?',
-        renderListItems: branches => renderPageOfBranches(branches, paginatedQueryOptions),
+        renderListItems: branches => {
+          renderPageOfBranches(branches, paginatedQueryOptions);
+        },
       },
     });
   }

packages/eas-cli/src/build/__tests__/cancel-test.ts

@@ -47,14 +47,14 @@ describe(selectBuildToCancelAsync.name, () => {
   it('does not return build id when confirmation is rejected', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(confirmAsync).mockResolvedValueOnce(false);
-    expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
+    await expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
   });
 
   it('returns build id when confirmation is confirmed', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(selectAsync).mockResolvedValueOnce(selectedBuildId);
     jest.mocked(confirmAsync).mockResolvedValueOnce(true);
-    expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
+    await expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
       selectedBuildId
     );
   });

packages/eas-cli/src/build/__tests__/delete-test.ts

@@ -47,14 +47,14 @@ describe(selectBuildToDeleteAsync.name, () => {
   it('does not return build id when confirmation is rejected', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(confirmAsync).mockResolvedValueOnce(false);
-    expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
+    await expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
   });
 
   it('returns build id when confirmation is confirmed', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(selectAsync).mockResolvedValueOnce(selectedBuildId);
     jest.mocked(confirmAsync).mockResolvedValueOnce(true);
-    expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
+    await expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
       selectedBuildId
     );
   });

packages/eas-cli/src/build/android/build.ts

@@ -107,7 +107,7 @@ export async function prepareAndroidBuildAsync(
             ? false
             : ctx.buildProfile.autoIncrement,
         vcsClient: ctx.vcsClient,
-        env: ctx.buildProfile.env,
+        env: ctx.env,
       });
     },
     prepareJobAsync: async (

packages/eas-cli/src/build/android/version.ts

@@ -44,7 +44,7 @@ export async function bumpVersionAsync({
 
   const buildGradle = await getAppBuildGradleAsync(projectDir);
   const isMultiFlavor =
-    buildGradle.android?.productFlavors || buildGradle.android?.flavorDimensions;
+    buildGradle.android?.productFlavors ?? buildGradle.android?.flavorDimensions;
   if (isMultiFlavor) {
     throw new Error(
       'Automatic version bumping is not supported for multi-flavor Android projects.'

packages/eas-cli/src/build/build.ts

@@ -59,6 +59,7 @@ import { BuildQuery } from '../graphql/queries/BuildQuery';
 import Log, { learnMore, link } from '../log';
 import { Ora, ora } from '../ora';
 import {
+  RequestedPlatform,
   appPlatformDisplayNames,
   appPlatformEmojis,
   requestedPlatformDisplayNames,
@@ -129,7 +130,9 @@ export async function prepareBuildRequestForPlatformAsync<
 
   await withAnalyticsAsync(
     ctx.analytics,
-    async () => await builder.syncProjectConfigurationAsync(ctx),
+    async () => {
+      await builder.syncProjectConfigurationAsync(ctx);
+    },
     {
       attemptEvent: BuildEvent.CONFIGURE_PROJECT_ATTEMPT,
       successEvent: BuildEvent.CONFIGURE_PROJECT_SUCCESS,
@@ -140,9 +143,15 @@ export async function prepareBuildRequestForPlatformAsync<
 
   if (await ctx.vcsClient.isCommitRequiredAsync()) {
     Log.addNewLineIfNone();
+    const platformToRequestedPlatform: Record<Platform, RequestedPlatform> = {
+      [Platform.ANDROID]: RequestedPlatform.Android,
+      [Platform.IOS]: RequestedPlatform.Ios,
+    };
     await reviewAndCommitChangesAsync(
       ctx.vcsClient,
-      `[EAS Build] Run EAS Build for ${requestedPlatformDisplayNames[ctx.platform as Platform]}`,
+      `[EAS Build] Run EAS Build for ${
+        requestedPlatformDisplayNames[platformToRequestedPlatform[ctx.platform]]
+      }`,
       { nonInteractive: ctx.nonInteractive }
     );
   }
@@ -177,7 +186,7 @@ export async function prepareBuildRequestForPlatformAsync<
 
   return async () => {
     if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
-      await runLocalBuildAsync(job, metadata, ctx.localBuildOptions);
+      await runLocalBuildAsync(job, metadata, ctx.localBuildOptions, ctx.env);
       return undefined;
     } else if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.INTERNAL) {
       await BuildMutation.updateBuildMetadataAsync(ctx.graphqlClient, {
@@ -667,17 +676,21 @@ async function createAndMaybeUploadFingerprintAsync<T extends Platform>(
     platform: ctx.platform,
     workflow: ctx.workflow,
     projectDir: ctx.projectDir,
-    env: ctx.buildProfile.env,
+    env: ctx.env,
     cwd: ctx.projectDir,
   });
 
+  if (!resolvedRuntimeVersion) {
+    return {};
+  }
+
   /**
    * It's ok for fingerprintSources to be empty
    * fingerprintSources only exist if the project is using runtimeVersion.policy: fingerprint
    */
-  if (!resolvedRuntimeVersion?.fingerprintSources) {
+  if (!resolvedRuntimeVersion.fingerprint) {
     return {
-      runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
+      runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
     };
   }
 
@@ -686,15 +699,16 @@ async function createAndMaybeUploadFingerprintAsync<T extends Platform>(
 
   await fs.writeJSON(fingerprintLocation, {
     hash: resolvedRuntimeVersion.runtimeVersion,
-    sources: resolvedRuntimeVersion.fingerprintSources,
+    sources: resolvedRuntimeVersion.fingerprint.fingerprintSources,
   });
 
   if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
     return {
-      runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
+      runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
       fingerprintSource: {
         type: FingerprintSourceType.PATH,
         path: fingerprintLocation,
+        isDebugFingerprint: resolvedRuntimeVersion.fingerprint.isDebugFingerprintSource,
       },
     };
   }
@@ -715,17 +729,18 @@ async function createAndMaybeUploadFingerprintAsync<T extends Platform>(
 
     Log.warn(errMessage);
     return {
-      runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
+      runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
     };
   } finally {
     await fs.remove(fingerprintLocation);
   }
 
   return {
-    runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
+    runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
     fingerprintSource: {
       type: FingerprintSourceType.GCS,
       bucketKey: fingerprintGCSBucketKey,
+      isDebugFingerprint: resolvedRuntimeVersion.fingerprint.isDebugFingerprintSource,
     },
   };
 }

packages/eas-cli/src/build/context.ts

@@ -63,4 +63,5 @@ export interface BuildContext<T extends Platform> {
   vcsClient: Client;
   loggerLevel?: LoggerLevel;
   repack: boolean;
+  env: Record<string, string>;
 }

packages/eas-cli/src/build/createContext.ts

@@ -43,6 +43,7 @@ export async function createBuildContextAsync<T extends Platform>({
   buildLoggerLevel,
   freezeCredentials,
   repack,
+  env,
 }: {
   buildProfileName: string;
   buildProfile: BuildProfile<T>;
@@ -64,8 +65,11 @@ export async function createBuildContextAsync<T extends Platform>({
   buildLoggerLevel?: LoggerLevel;
   freezeCredentials: boolean;
   repack: boolean;
+  env: Record<string, string>;
 }): Promise<BuildContext<T>> {
-  const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: buildProfile.env });
+  const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
+    env,
+  });
   const projectName = exp.slug;
   const account = await getOwnerAccountForProjectIdAsync(graphqlClient, projectId);
   const workflow = await resolveWorkflowAsync(projectDir, platform, vcsClient);
@@ -87,7 +91,7 @@ export async function createBuildContextAsync<T extends Platform>({
     user: actor,
     graphqlClient,
     analytics,
-    env: buildProfile.env,
+    env,
     easJsonCliConfig,
     vcsClient,
     freezeCredentials,
@@ -147,6 +151,7 @@ export async function createBuildContextAsync<T extends Platform>({
     requiredPackageManager,
     loggerLevel: buildLoggerLevel,
     repack,
+    env,
   };
   if (platform === Platform.ANDROID) {
     const common = commonContext as CommonContext<Platform.ANDROID>;

packages/eas-cli/src/build/evaluateConfigWithEnvVarsAsync.ts

@@ -0,0 +1,81 @@
+import { Env } from '@expo/eas-build-job';
+import { BuildProfile } from '@expo/eas-json';
+
+import { ExpoGraphqlClient } from '../commandUtils/context/contextUtils/createGraphqlClient';
+import { EnvironmentVariableEnvironment } from '../graphql/generated';
+import { EnvironmentVariablesQuery } from '../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../log';
+
+function isEnvironment(env: string): env is EnvironmentVariableEnvironment {
+  return Object.values(EnvironmentVariableEnvironment).includes(
+    env.toUpperCase() as EnvironmentVariableEnvironment
+  );
+}
+
+export async function evaluateConfigWithEnvVarsAsync<Config extends { projectId: string }, Opts>({
+  flags,
+  buildProfile,
+  graphqlClient,
+  getProjectConfig,
+  opts,
+}: {
+  flags: { environment?: string };
+  buildProfile: BuildProfile;
+  graphqlClient: ExpoGraphqlClient | null;
+  opts: Opts;
+  getProjectConfig(opts: Opts): Promise<Config>;
+}): Promise<Config & { env: Env }> {
+  if (!graphqlClient) {
+    Log.warn('An Expo user account is required to fetch environment variables.');
+    const config = await getProjectConfig(opts);
+    return { env: buildProfile.env ?? {}, ...config };
+  }
+  const { projectId } = await getProjectConfig({ env: buildProfile.env, ...opts });
+  const env = await resolveEnvVarsAsync({ flags, buildProfile, graphqlClient, projectId });
+  const config = await getProjectConfig({ ...opts, env });
+
+  return { env, ...config };
+}
+
+async function resolveEnvVarsAsync({
+  flags,
+  buildProfile,
+  graphqlClient,
+  projectId,
+}: {
+  flags: { environment?: string };
+  buildProfile: BuildProfile;
+  graphqlClient: ExpoGraphqlClient;
+  projectId: string;
+}): Promise<Env> {
+  const environment =
+    flags.environment ?? buildProfile.environment ?? process.env.EAS_CURRENT_ENVIRONMENT;
+
+  if (!environment || !isEnvironment(environment)) {
+    return { ...buildProfile.env };
+  }
+
+  try {
+    const environmentVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        environment,
+      }
+    );
+    const envVars = Object.fromEntries(
+      environmentVariables
+        .filter(({ name, value }) => name && value)
+        .map(({ name, value }) => [name, value])
+    ) as Record<string, string>;
+
+    return { ...envVars, ...buildProfile.env };
+  } catch (e) {
+    Log.error('Failed to pull env variables for environment ${environment} from EAS servers');
+    Log.error(e);
+    Log.error(
+      'This can possibly be a bug in EAS/EAS CLI. Report it here: https://github.com/expo/eas-cli/issues'
+    );
+    return { ...buildProfile.env };
+  }
+}

packages/eas-cli/src/build/ios/build.ts

@@ -24,7 +24,7 @@ import {
 export async function createIosContextAsync(
   ctx: CommonContext<Platform.IOS>
 ): Promise<IosBuildContext> {
-  const { buildProfile } = ctx;
+  const { buildProfile, env } = ctx;
 
   if (ctx.workflow === Workflow.MANAGED) {
     await ensureBundleIdentifierIsDefinedForManagedProjectAsync(ctx);
@@ -47,7 +47,7 @@ export async function createIosContextAsync(
     projectDir: ctx.projectDir,
     exp: ctx.exp,
     xcodeBuildContext,
-    env: buildProfile.env,
+    env,
     vcsClient: ctx.vcsClient,
   });
   const applicationTarget = findApplicationTarget(targets);
@@ -77,7 +77,7 @@ export async function prepareIosBuildAsync(
   return await prepareBuildRequestForPlatformAsync({
     ctx,
     ensureCredentialsAsync: async (ctx: BuildContext<Platform.IOS>) => {
-      return ensureIosCredentialsAsync(ctx, ctx.ios.targets);
+      return await ensureIosCredentialsAsync(ctx, ctx.ios.targets);
     },
     syncProjectConfigurationAsync: async () => {
       await syncProjectConfigurationAsync({
@@ -89,7 +89,7 @@ export async function prepareIosBuildAsync(
             ? false
             : ctx.buildProfile.autoIncrement,
         vcsClient: ctx.vcsClient,
-        env: ctx.buildProfile.env,
+        env: ctx.env,
       });
     },
     prepareJobAsync: async (

packages/eas-cli/src/build/local.ts

@@ -39,7 +39,8 @@ export interface LocalBuildOptions {
 export async function runLocalBuildAsync(
   job: Job,
   metadata: Metadata,
-  options: LocalBuildOptions
+  options: LocalBuildOptions,
+  env: Record<string, string>
 ): Promise<void> {
   const { command, args } = await getCommandAndArgsAsync(job, metadata);
   let spinner;
@@ -57,6 +58,7 @@ export async function runLocalBuildAsync(
     const spawnPromise = spawnAsync(command, args, {
       stdio: options.verbose ? 'inherit' : 'pipe',
       env: {
+        ...env,
         ...process.env,
         EAS_LOCAL_BUILD_WORKINGDIR: options.workingdir ?? process.env.EAS_LOCAL_BUILD_WORKINGDIR,
         ...(options.skipCleanup || options.skipNativeBuild

packages/eas-cli/src/build/queries.ts

@@ -50,8 +50,9 @@ export async function listAndRenderBuildsOnAppAsync(
         }),
       promptOptions: {
         title: 'Load more builds?',
-        renderListItems: builds =>
-          renderPageOfBuilds({ builds, projectDisplayName, paginatedQueryOptions }),
+        renderListItems: builds => {
+          renderPageOfBuilds({ builds, projectDisplayName, paginatedQueryOptions });
+        },
       },
     });
   }

packages/eas-cli/src/build/runBuildAndSubmit.ts

@@ -2,7 +2,6 @@ import { ExpoConfig } from '@expo/config-types';
 import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import {
   AppVersionSource,
-  BuildProfile,
   EasJson,
   EasJsonAccessor,
   EasJsonUtils,
@@ -19,6 +18,7 @@ import { BuildRequestSender, MaybeBuildFragment, waitForBuildEndAsync } from './
 import { ensureProjectConfiguredAsync } from './configure';
 import { BuildContext } from './context';
 import { createBuildContextAsync } from './createContext';
+import { evaluateConfigWithEnvVarsAsync } from './evaluateConfigWithEnvVarsAsync';
 import { prepareIosBuildAsync } from './ios/build';
 import { LocalBuildMode, LocalBuildOptions } from './local';
 import { ensureExpoDevClientInstalledForDevClientBuildsAsync } from './utils/devClient';
@@ -33,6 +33,7 @@ import {
   BuildFragment,
   BuildStatus,
   BuildWithSubmissionsFragment,
+  EnvironmentVariableEnvironment,
   SubmissionFragment,
 } from '../graphql/generated';
 import { BuildQuery } from '../graphql/queries/BuildQuery';
@@ -96,6 +97,7 @@ export interface BuildFlags {
   buildLoggerLevel?: LoggerLevel;
   freezeCredentials: boolean;
   repack: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }
 
 export async function runBuildAndSubmitAsync(
@@ -129,13 +131,6 @@ export async function runBuildAndSubmitAsync(
     profileName: flags.profile ?? undefined,
     projectDir,
   });
-  Log.log(
-    `Loaded "env" configuration for the "${buildProfiles[0].profileName}" profile: ${
-      buildProfiles[0].profile.env
-        ? Object.keys(buildProfiles[0].profile.env).join(', ')
-        : 'no environment variables specified'
-    }. ${learnMore('https://docs.expo.dev/build-reference/variables/')}`
-  );
 
   for (const buildProfile of buildProfiles) {
     if (buildProfile.profile.image && ['default', 'stable'].includes(buildProfile.profile.image)) {
@@ -192,6 +187,21 @@ export async function runBuildAndSubmitAsync(
 
   for (const buildProfile of buildProfiles) {
     const platform = toAppPlatform(buildProfile.platform);
+
+    const { env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile: buildProfile.profile,
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: buildProfile.profile.env },
+    });
+
+    Log.log(
+      `Loaded "env" configuration for the "${buildProfile.profileName}" profile: ${
+        env ? Object.keys(env).join(', ') : 'no environment variables specified'
+      }. ${learnMore('https://docs.expo.dev/build-reference/variables/')}`
+    );
+
     const { build: maybeBuild, buildCtx } = await prepareAndStartBuildAsync({
       projectDir,
       flags,
@@ -204,6 +214,7 @@ export async function runBuildAndSubmitAsync(
       vcsClient,
       getDynamicPrivateProjectConfigAsync,
       customBuildConfigMetadata: customBuildConfigMetadataByPlatform[platform],
+      env,
     });
     if (maybeBuild) {
       startedBuilds.push({ build: maybeBuild, buildProfile });
@@ -251,7 +262,6 @@ export async function runBuildAndSubmitAsync(
         buildCtx: nullthrows(buildCtxByPlatform[startedBuild.build.platform]),
         moreBuilds: startedBuilds.length > 1,
         projectDir,
-        buildProfile: startedBuild.buildProfile.profile,
         submitProfile,
         nonInteractive: flags.nonInteractive,
         selectedSubmitProfileName: flags.submitProfile,
@@ -340,6 +350,7 @@ async function prepareAndStartBuildAsync({
   vcsClient,
   getDynamicPrivateProjectConfigAsync,
   customBuildConfigMetadata,
+  env,
 }: {
   projectDir: string;
   flags: BuildFlags;
@@ -352,6 +363,7 @@ async function prepareAndStartBuildAsync({
   vcsClient: Client;
   getDynamicPrivateProjectConfigAsync: DynamicConfigContextFn;
   customBuildConfigMetadata?: CustomBuildConfigMetadata;
+  env: Env;
 }): Promise<{ build: BuildFragment | undefined; buildCtx: BuildContext<Platform> }> {
   const buildCtx = await createBuildContextAsync({
     buildProfileName: buildProfile.profileName,
@@ -374,6 +386,7 @@ async function prepareAndStartBuildAsync({
     buildLoggerLevel: flags.buildLoggerLevel,
     freezeCredentials: flags.freezeCredentials,
     repack: flags.repack,
+    env,
   });
 
   if (moreBuilds) {
@@ -448,7 +461,6 @@ async function prepareAndStartSubmissionAsync({
   buildCtx,
   moreBuilds,
   projectDir,
-  buildProfile,
   submitProfile,
   selectedSubmitProfileName,
   nonInteractive,
@@ -457,7 +469,6 @@ async function prepareAndStartSubmissionAsync({
   buildCtx: BuildContext<Platform>;
   moreBuilds: boolean;
   projectDir: string;
-  buildProfile: BuildProfile;
   submitProfile: SubmitProfile;
   selectedSubmitProfileName?: string;
   nonInteractive: boolean;
@@ -469,7 +480,7 @@ async function prepareAndStartSubmissionAsync({
     profile: submitProfile,
     archiveFlags: { id: build.id },
     nonInteractive,
-    env: buildProfile.env,
+    env: buildCtx.env,
     credentialsCtx: buildCtx.credentialsCtx,
     applicationIdentifier: buildCtx.android?.applicationId ?? buildCtx.ios?.bundleIdentifier,
     actor: buildCtx.user,

packages/eas-cli/src/build/utils/printBuildInfo.ts

@@ -62,7 +62,9 @@ export function printBuildResults(builds: (BuildFragment | null)[]): void {
     assert(build, 'Build should be defined');
     printBuildResult(build);
   } else {
-    (builds.filter(i => i) as BuildFragment[]).forEach(build => printBuildResult(build));
+    (builds.filter(i => i) as BuildFragment[]).forEach(build => {
+      printBuildResult(build);
+    });
   }
 }
 
@@ -97,9 +99,9 @@ function printBuildResult(build: BuildFragment): void {
     // to the build details page and let people press the button to download there
     const qrcodeUrl =
       build.platform === AppPlatform.Ios ? getInternalDistributionInstallUrl(build) : logsUrl;
-    qrcodeTerminal.generate(qrcodeUrl, { small: true }, code =>
-      Log.log(`${indentString(code, 2)}\n`)
-    );
+    qrcodeTerminal.generate(qrcodeUrl, { small: true }, code => {
+      Log.log(`${indentString(code, 2)}\n`);
+    });
     Log.log(
       `${appPlatformEmojis[build.platform]} Open this link on your ${
         appPlatformDisplayNames[build.platform]

packages/eas-cli/src/build/validate.ts

@@ -9,9 +9,9 @@ import Log, { learnMore } from '../log';
 import { isPNGAsync } from '../utils/image';
 
 export function checkNodeEnvVariable(ctx: CommonContext<Platform>): void {
-  if (ctx.buildProfile.env?.NODE_ENV === 'production') {
+  if (ctx.env?.NODE_ENV === 'production') {
     Log.warn(
-      'You set NODE_ENV=production in the build profile. Remember that it will be available during the entire build process. In particular, it will make yarn/npm install only production packages.'
+      'You set NODE_ENV=production in the build profile or environment variables. Remember that it will be available during the entire build process. In particular, it will make yarn/npm install only production packages.'
     );
     Log.newLine();
   }

packages/eas-cli/src/channel/__tests__/branch-mapping-test.ts

@@ -17,7 +17,9 @@ import {
 
 describe(assertVersion, () => {
   it('throws if the branch mapping is not the correct version', () => {
-    expect(() => assertVersion(testChannelBasicInfo, 5)).toThrowError(BranchMappingValidationError);
+    expect(() => {
+      assertVersion(testChannelBasicInfo, 5);
+    }).toThrowError(BranchMappingValidationError);
   });
   it('asserts the correct version', () => {
     assertVersion(testChannelBasicInfo, 0);

packages/eas-cli/src/channel/actions/SelectChannel.ts

@@ -28,7 +28,7 @@ import {
  */
 export class SelectChannel implements EASUpdateAction<UpdateChannelBasicInfoFragment | null> {
   constructor(
-    private options: {
+    private readonly options: {
       filterPredicate?: (channelInfo: UpdateChannelBasicInfoFragment) => boolean;
       printedType?: string;
       pageSize?: number;
@@ -91,8 +91,8 @@ export class SelectChannel implements EASUpdateAction<UpdateChannelBasicInfoFrag
       queryParams: QueryParams
     ): Promise<Connection<UpdateChannelBasicInfoFragment>> =>
       filterPredicate
-        ? this.filterQueryAsync(ctx, queryParams, filterPredicate)
-        : this.queryAsync(ctx, queryParams);
+        ? await this.filterQueryAsync(ctx, queryParams, filterPredicate)
+        : await this.queryAsync(ctx, queryParams);
 
     const getTitleAsync = async (channelInfo: UpdateChannelBasicInfoFragment): Promise<string> =>
       channelInfo.name;

packages/eas-cli/src/channel/queries.ts

@@ -89,7 +89,9 @@ export async function listAndRenderChannelsOnAppAsync(
         queryChannelsOnAppAsync(graphqlClient, { limit, offset, appId: projectId }),
       promptOptions: {
         title: 'Load more channels?',
-        renderListItems: channels => renderPageOfChannels(channels, paginatedQueryOptions),
+        renderListItems: channels => {
+          renderPageOfChannels(channels, paginatedQueryOptions);
+        },
       },
     });
   }
@@ -131,8 +133,9 @@ export async function listAndRenderBranchesAndUpdatesOnChannelAsync(
         }),
       promptOptions: {
         title: 'Load more channels?',
-        renderListItems: branches =>
-          renderPageOfBranchesOnChannel(channel, branches, paginatedQueryOptions),
+        renderListItems: branches => {
+          renderPageOfBranchesOnChannel(channel, branches, paginatedQueryOptions);
+        },
       },
     });
   }

packages/eas-cli/src/commandUtils/EasCommand.ts

@@ -187,13 +187,13 @@ export default abstract class EasCommand extends Command {
       action: `eas ${this.id}`,
     });
 
-    return this.runAsync();
+    return await this.runAsync();
   }
 
   // eslint-disable-next-line async-protect/async-suffix
   override async finally(err: Error): Promise<any> {
     await this.analytics.flushAsync();
-    return super.finally(err);
+    return await super.finally(err);
   }
 
   protected override catch(err: Error): Promise<any> {

packages/eas-cli/src/commandUtils/context/contextUtils/createGraphqlClient.ts

@@ -38,7 +38,7 @@ export function createGraphqlClient(authInfo: {
           return !!(
             err &&
             !operation.context.noRetry &&
-            (err.networkError || err.graphQLErrors.some(e => e?.extensions?.isTransient))
+            (err.networkError ?? err.graphQLErrors.some(e => e?.extensions?.isTransient))
           );
         },
       }),

packages/eas-cli/src/commandUtils/flags.ts

@@ -38,6 +38,21 @@ export const EASEnvironmentFlag = {
   }),
 };
 
+// NOTE: Used in build commands, should be replaced with EASEnvironmentFlag when
+// the feature is public
+export const EASEnvironmentFlagHidden = {
+  environment: Flags.enum<EnvironmentVariableEnvironment>({
+    description: "Environment variable's environment",
+    parse: upperCaseAsync,
+    hidden: true,
+    options: mapToLowercase([
+      EnvironmentVariableEnvironment.Development,
+      EnvironmentVariableEnvironment.Preview,
+      EnvironmentVariableEnvironment.Production,
+    ]),
+  }),
+};
+
 export const EASVariableFormatFlag = {
   format: Flags.enum({
     description: 'Output format',

packages/eas-cli/src/commandUtils/gating/FeatureGating.ts

@@ -63,7 +63,11 @@ export default class FeatureGating {
   }
 
   public static overrideKeyForEachInTest(key: FeatureGateKey, enabled: boolean): void {
-    beforeEach(() => FeatureGateTestOverrides.setOverride(key, enabled));
-    afterEach(() => FeatureGateTestOverrides.removeOverride(key));
+    beforeEach(() => {
+      FeatureGateTestOverrides.setOverride(key, enabled);
+    });
+    afterEach(() => {
+      FeatureGateTestOverrides.removeOverride(key);
+    });
   }
 }

packages/eas-cli/src/commands/analytics.ts

@@ -10,7 +10,7 @@ export default class AnalyticsView extends EasCommand {
   async runAsync(): Promise<void> {
     const { STATUS: status } = (await this.parse(AnalyticsView)).args;
     if (status) {
-      setAnalyticsEnabledAsync(status === 'on');
+      await setAnalyticsEnabledAsync(status === 'on');
       Log.withTick(`${status === 'on' ? 'Enabling' : 'Disabling'} analytics.`);
     } else {
       const analyticsEnabled = await getAnalyticsEnabledAsync();

packages/eas-cli/src/commands/build/cancel.ts

@@ -39,7 +39,7 @@ async function cancelBuildAsync(
       )
       .toPromise()
   );
-  return data.build!.cancel;
+  return data.build.cancel;
 }
 
 export async function selectBuildToCancelAsync(

packages/eas-cli/src/commands/build/delete.ts

@@ -33,7 +33,7 @@ async function deleteBuildAsync(
       )
       .toPromise()
   );
-  return data.build!.deleteBuild;
+  return data.build.deleteBuild;
 }
 
 export async function selectBuildToDeleteAsync(

packages/eas-cli/src/commands/build/index.ts

@@ -10,8 +10,8 @@ import path from 'path';
 import { LocalBuildMode } from '../../build/local';
 import { BuildFlags, runBuildAndSubmitAsync } from '../../build/runBuildAndSubmit';
 import EasCommand from '../../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
-import { StatuspageServiceName } from '../../graphql/generated';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { EnvironmentVariableEnvironment, StatuspageServiceName } from '../../graphql/generated';
 import Log, { link } from '../../log';
 import { RequestedPlatform, selectRequestedPlatformAsync } from '../../platform';
 import { selectAsync } from '../../prompts';
@@ -37,6 +37,7 @@ interface RawBuildFlags {
   'build-logger-level'?: LoggerLevel;
   'freeze-credentials': boolean;
   repack: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }
 
 export default class Build extends EasCommand {
@@ -116,12 +117,14 @@ export default class Build extends EasCommand {
       description: 'Use the golden dev client build repack flow as it works for onboarding',
     }),
     ...EasNonInteractiveAndJsonFlags,
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
     ...this.ContextOptions.LoggedIn,
     ...this.ContextOptions.DynamicProjectConfig,
     ...this.ContextOptions.ProjectDir,
+    ...this.ContextOptions.ProjectConfig,
     ...this.ContextOptions.Analytics,
     ...this.ContextOptions.Vcs,
   };
@@ -230,6 +233,7 @@ export default class Build extends EasCommand {
       buildLoggerLevel: flags['build-logger-level'],
       freezeCredentials: flags['freeze-credentials'],
       repack: flags.repack,
+      environment: flags.environment,
     };
   }
 

packages/eas-cli/src/commands/build/resign.ts

@@ -6,13 +6,14 @@ import chalk from 'chalk';
 
 import { handleDeprecatedEasJsonAsync } from '.';
 import { waitForBuildEndAsync } from '../../build/build';
+import { evaluateConfigWithEnvVarsAsync } from '../../build/evaluateConfigWithEnvVarsAsync';
 import { ensureIosCredentialsForBuildResignAsync } from '../../build/ios/credentials';
 import { prepareCredentialsToResign } from '../../build/ios/prepareJob';
 import { listAndSelectBuildOnAppAsync } from '../../build/queries';
 import { printBuildResults, printLogsUrls } from '../../build/utils/printBuildInfo';
 import EasCommand from '../../commandUtils/EasCommand';
 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
-import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
 import { EasPaginatedQueryFlags } from '../../commandUtils/pagination';
 import { CredentialsContext } from '../../credentials/context';
 import {
@@ -21,6 +22,7 @@ import {
   BuildStatus,
   BuildWorkflow,
   DistributionType,
+  EnvironmentVariableEnvironment,
   IosJobOverridesInput,
   ProjectArchiveSourceType,
   StatuspageServiceName,
@@ -46,6 +48,7 @@ interface BuildResignFlags {
   sourceProfile?: string;
   maybeBuildId?: string;
   wait: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }
 interface RawBuildResignFlags {
   json: boolean;
@@ -57,6 +60,7 @@ interface RawBuildResignFlags {
   'source-profile': string | undefined;
   wait: boolean;
   id: string | undefined;
+  environment: EnvironmentVariableEnvironment | undefined;
 }
 
 export default class BuildResign extends EasCommand {
@@ -89,6 +93,7 @@ export default class BuildResign extends EasCommand {
     }),
     ...EasPaginatedQueryFlags,
     ...EasNonInteractiveAndJsonFlags,
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
@@ -140,7 +145,15 @@ export default class BuildResign extends EasCommand {
       platform,
       flags.targetProfile ?? 'production'
     );
-    const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: buildProfile.env });
+
+    const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile,
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: buildProfile.env },
+    });
+
     const account = await getOwnerAccountForProjectIdAsync(graphqlClient, projectId);
     const build = await this.ensureBuildSelectedAsync(
       {
@@ -161,7 +174,7 @@ export default class BuildResign extends EasCommand {
       user: actor,
       graphqlClient,
       analytics,
-      env: buildProfile.env,
+      env,
       easJsonCliConfig,
       vcsClient,
     });
@@ -181,7 +194,7 @@ export default class BuildResign extends EasCommand {
       projectDir,
       exp,
       xcodeBuildContext,
-      env: buildProfile.env,
+      env,
       vcsClient,
     });
     const credentialsResult = await ensureIosCredentialsForBuildResignAsync(
@@ -248,6 +261,7 @@ export default class BuildResign extends EasCommand {
       targetProfile: flags['target-profile'],
       maybeBuildId: flags.id,
       wait: flags.wait,
+      environment: flags.environment,
     };
   }
 

packages/eas-cli/src/commands/build/version/get.ts

@@ -3,8 +3,12 @@ import { EasJsonAccessor } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../../../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../../../commandUtils/flags';
+import {
+  EASEnvironmentFlagHidden,
+  EasNonInteractiveAndJsonFlags,
+} from '../../../commandUtils/flags';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
 import Log from '../../../log';
@@ -31,6 +35,7 @@ export default class BuildVersionGetView extends EasCommand {
         'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
       helpValue: 'PROFILE_NAME',
     }),
+    ...EASEnvironmentFlagHidden,
     ...EasNonInteractiveAndJsonFlags,
   };
 
@@ -74,8 +79,12 @@ export default class BuildVersionGetView extends EasCommand {
     });
     const results: { [key in Platform]?: string } = {};
     for (const { profile, platform } of buildProfiles) {
-      const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
-        env: profile.env,
+      const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profile,
+        graphqlClient,
+        getProjectConfig: getDynamicPrivateProjectConfigAsync,
+        opts: { env: profile.env },
       });
 
       validateAppConfigForRemoteVersionSource(exp, platform);
@@ -89,6 +98,7 @@ export default class BuildVersionGetView extends EasCommand {
         platform,
         vcsClient,
         nonInteractive: flags['non-interactive'],
+        env,
       });
       const remoteVersions = await AppVersionQuery.latestVersionAsync(
         graphqlClient,

packages/eas-cli/src/commands/build/version/set.ts

@@ -4,7 +4,9 @@ import { EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../../../commandUtils/EasCommand';
+import { EASEnvironmentFlagHidden } from '../../../commandUtils/flags';
 import { AppVersionMutation } from '../../../graphql/mutations/AppVersionMutation';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
@@ -35,6 +37,7 @@ export default class BuildVersionSetView extends EasCommand {
         'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
       helpValue: 'PROFILE_NAME',
     }),
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
@@ -64,7 +67,13 @@ export default class BuildVersionSetView extends EasCommand {
       flags.profile ?? undefined
     );
 
-    const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: profile.env });
+    const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile: profile,
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: profile.env },
+    });
     const displayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
 
     validateAppConfigForRemoteVersionSource(exp, platform);
@@ -78,6 +87,7 @@ export default class BuildVersionSetView extends EasCommand {
       platform,
       vcsClient,
       nonInteractive: false,
+      env,
     });
     const remoteVersions = await AppVersionQuery.latestVersionAsync(
       graphqlClient,

packages/eas-cli/src/commands/build/version/sync.ts

@@ -5,8 +5,10 @@ import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
 import { updateNativeVersionsAsync as updateAndroidNativeVersionsAsync } from '../../../build/android/version';
+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import { updateNativeVersionsAsync as updateIosNativeVersionsAsync } from '../../../build/ios/version';
 import EasCommand from '../../../commandUtils/EasCommand';
+import { EASEnvironmentFlagHidden } from '../../../commandUtils/flags';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
 import Log from '../../../log';
@@ -54,6 +56,7 @@ export default class BuildVersionSyncView extends EasCommand {
         'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
       helpValue: 'PROFILE_NAME',
     }),
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
@@ -87,8 +90,12 @@ export default class BuildVersionSyncView extends EasCommand {
       projectDir,
     });
     for (const profileInfo of buildProfiles) {
-      const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
-        env: profileInfo.profile.env,
+      const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profileInfo.profile,
+        graphqlClient,
+        getProjectConfig: getDynamicPrivateProjectConfigAsync,
+        opts: { env: profileInfo.profile.env },
       });
 
       validateAppConfigForRemoteVersionSource(exp, profileInfo.platform);
@@ -103,6 +110,7 @@ export default class BuildVersionSyncView extends EasCommand {
         platform: profileInfo.platform,
         vcsClient,
         nonInteractive: false,
+        env,
       });
       const remoteVersions = await AppVersionQuery.latestVersionAsync(
         graphqlClient,
@@ -128,7 +136,7 @@ export default class BuildVersionSyncView extends EasCommand {
         continue;
       }
       if (profileInfo.platform === Platform.ANDROID) {
-        this.syncAndroidAsync({
+        await this.syncAndroidAsync({
           projectDir,
           exp,
           profile: profileInfo.profile as BuildProfile<Platform.ANDROID>,
@@ -137,7 +145,7 @@ export default class BuildVersionSyncView extends EasCommand {
           vcsClient,
         });
       } else {
-        this.syncIosAsync({
+        await this.syncIosAsync({
           projectDir,
           exp,
           profile: profileInfo.profile as BuildProfile<Platform.IOS>,
@@ -199,7 +207,7 @@ export default class BuildVersionSyncView extends EasCommand {
     if (workflow === Workflow.GENERIC) {
       const buildGradle = await getAppBuildGradleAsync(projectDir);
       const isMultiFlavor =
-        buildGradle.android?.productFlavors || buildGradle.android?.flavorDimensions;
+        buildGradle.android?.productFlavors ?? buildGradle.android?.flavorDimensions;
       if (isMultiFlavor) {
         throw new Error(
           "Versions in native code can't be automatically synced in multi-flavor Android projects. If you are using EAS Build with app version source set to remote, the correct values will be injected at the build time."

packages/eas-cli/src/commands/config.ts

@@ -4,8 +4,10 @@ import { EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
+import { evaluateConfigWithEnvVarsAsync } from '../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../commandUtils/flags';
+import { createGraphqlClient } from '../commandUtils/context/contextUtils/createGraphqlClient';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../commandUtils/flags';
 import { toAppPlatform } from '../graphql/types/AppPlatform';
 import Log from '../log';
 import { appPlatformEmojis } from '../platform';
@@ -27,12 +29,14 @@ export default class Config extends EasCommand {
     'eas-json-only': Flags.boolean({
       hidden: true,
     }),
+    ...EASEnvironmentFlagHidden,
     ...EasNonInteractiveAndJsonFlags,
   };
 
   static override contextDefinition = {
     ...this.ContextOptions.DynamicProjectConfig,
     ...this.ContextOptions.ProjectDir,
+    ...this.ContextOptions.SessionManagment,
   };
 
   async runAsync(): Promise<void> {
@@ -40,10 +44,15 @@ export default class Config extends EasCommand {
     if (flags.json) {
       enableJsonOutput();
     }
-    const { platform: maybePlatform, profile: maybeProfile } = flags;
-    const { getDynamicPublicProjectConfigAsync, projectDir } = await this.getContextAsync(Config, {
-      nonInteractive: false,
-    });
+    const {
+      platform: maybePlatform,
+      profile: maybeProfile,
+      'non-interactive': nonInteractive,
+    } = flags;
+    const { getDynamicPublicProjectConfigAsync, projectDir, sessionManager } =
+      await this.getContextAsync(Config, {
+        nonInteractive,
+      });
 
     const accessor = EasJsonAccessor.fromProjectPath(projectDir);
     const profileName =
@@ -80,8 +89,16 @@ export default class Config extends EasCommand {
         Log.log(JSON.stringify(profile, null, 2));
       }
     } else {
-      const { exp: appConfig } = await getDynamicPublicProjectConfigAsync({
-        env: profile.env,
+      const { authenticationInfo } = await sessionManager.ensureLoggedInAsync({
+        nonInteractive,
+      });
+      const graphqlClient = createGraphqlClient(authenticationInfo);
+      const { exp: appConfig } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profile,
+        graphqlClient,
+        getProjectConfig: getDynamicPublicProjectConfigAsync,
+        opts: { env: profile.env },
       });
 
       if (flags.json) {

packages/eas-cli/src/commands/device/delete.ts

@@ -170,7 +170,7 @@ export default class DeviceDelete extends EasCommand {
       Log.log(
         formatDevice(device, {
           appleTeamName,
-          appleTeamIdentifier: appleTeamIdentifier!,
+          appleTeamIdentifier,
         })
       );
       Log.newLine();

packages/eas-cli/src/commands/device/rename.ts

@@ -159,7 +159,7 @@ export default class DeviceRename extends EasCommand {
       Log.log(
         formatDevice(device, {
           appleTeamName,
-          appleTeamIdentifier: appleTeamIdentifier!,
+          appleTeamIdentifier,
         })
       );
       Log.newLine();

packages/eas-cli/src/commands/env/create.ts

@@ -114,11 +114,10 @@ export default class EnvironmentVariableCreate extends EasCommand {
       if (!environment) {
         environment = await promptVariableEnvironmentAsync(nonInteractive);
       }
-      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(
-        graphqlClient,
-        projectId,
-        environment
-      );
+      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
       const existingVariable = existingVariables.find(variable => variable.name === name);
 
       if (existingVariable) {
@@ -191,7 +190,9 @@ export default class EnvironmentVariableCreate extends EasCommand {
         `Created a new variable ${chalk.bold(name)} on project ${chalk.bold(projectDisplayName)}.`
       );
     } else if (scope === EnvironmentVariableScope.Shared) {
-      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, projectId);
+      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+        appId: projectId,
+      });
       const existingVariable = sharedVariables.find(variable => variable.name === name);
       if (existingVariable) {
         throw new Error(

packages/eas-cli/src/commands/env/delete.ts

@@ -58,8 +58,11 @@ export default class EnvironmentVariableDelete extends EasCommand {
 
     const variables =
       scope === EnvironmentVariableScope.Project && environment
-        ? await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, projectId, environment)
-        : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, projectId);
+        ? await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+            appId: projectId,
+            environment,
+          })
+        : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, { appId: projectId });
 
     if (!name) {
       ({ name } = await promptAsync({

packages/eas-cli/src/commands/env/get.ts

@@ -72,7 +72,6 @@ export default class EnvironmentVariableGet extends EasCommand {
     if (!environment && scope === EnvironmentVariableScope.Project) {
       environment = await promptVariableEnvironmentAsync(nonInteractive);
     }
-
     const variable = await getVariableAsync(graphqlClient, scope, projectId, name, environment);
 
     if (!variable) {
@@ -117,26 +116,32 @@ async function getVariableAsync(
   graphqlClient: ExpoGraphqlClient,
   scope: string,
   projectId: string,
-  name: string,
+  name: string | undefined,
   environment: string | undefined
 ): Promise<EnvironmentVariableFragment | null> {
   if (!environment && scope === EnvironmentVariableScope.Project) {
     throw new Error('Environment is required.');
   }
+  if (!name) {
+    throw new Error("Variable name is required. Run the command with '--name VARIABLE_NAME' flag.");
+  }
   if (environment && scope === EnvironmentVariableScope.Project) {
-    const appVariables = await EnvironmentVariablesQuery.byAppIdAsync(
-      graphqlClient,
-      projectId,
+    const appVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(graphqlClient, {
+      appId: projectId,
       environment,
-      [name]
-    );
+      filterNames: [name],
+    });
     return appVariables[0];
   }
 
   if (scope === EnvironmentVariableScope.Shared) {
-    const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, projectId, [
-      name,
-    ]);
+    const sharedVariables = await EnvironmentVariablesQuery.sharedWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        filterNames: [name],
+      }
+    );
     return sharedVariables[0];
   }
 

packages/eas-cli/src/commands/env/link.ts

@@ -40,7 +40,9 @@ export default class EnvironmentVariableLink extends EasCommand {
     });
 
     const projectDisplayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
-    const variables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, projectId);
+    const variables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+      appId: projectId,
+    });
 
     if (!name) {
       name = await selectAsync(

packages/eas-cli/src/commands/env/list.ts

@@ -1,12 +1,18 @@
+import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
 import EasCommand from '../../commandUtils/EasCommand';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import {
   EASEnvironmentFlag,
   EASVariableFormatFlag,
   EASVariableScopeFlag,
 } from '../../commandUtils/flags';
-import { EnvironmentVariableScope } from '../../graphql/generated';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+} from '../../graphql/generated';
 import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
 import Log from '../../log';
 import { formatVariable } from '../../utils/formatVariable';
@@ -23,6 +29,10 @@ export default class EnvironmentValueList extends EasCommand {
   };
 
   static override flags = {
+    'include-sensitive': Flags.boolean({
+      description: 'Display sensitive values in the output',
+      default: false,
+    }),
     ...EASVariableFormatFlag,
     ...EASVariableScopeFlag,
     ...EASEnvironmentFlag,
@@ -30,7 +40,7 @@ export default class EnvironmentValueList extends EasCommand {
 
   async runAsync(): Promise<void> {
     let {
-      flags: { environment, format, scope },
+      flags: { environment, format, scope, 'include-sensitive': includeSensitive },
     } = await this.parse(EnvironmentValueList);
     const {
       privateProjectConfig: { projectId },
@@ -43,10 +53,12 @@ export default class EnvironmentValueList extends EasCommand {
       environment = await promptVariableEnvironmentAsync(false);
     }
 
-    const variables =
-      scope === EnvironmentVariableScope.Project && environment
-        ? await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, projectId, environment)
-        : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, projectId);
+    const variables = await this.getVariablesForScopeAsync(graphqlClient, {
+      scope,
+      includingSensitive: includeSensitive,
+      environment,
+      projectId,
+    });
 
     if (format === 'short') {
       for (const variable of variables) {
@@ -69,4 +81,38 @@ export default class EnvironmentValueList extends EasCommand {
       );
     }
   }
+
+  private async getVariablesForScopeAsync(
+    graphqlClient: ExpoGraphqlClient,
+    {
+      scope,
+      includingSensitive,
+      environment,
+      projectId,
+    }: {
+      scope: EnvironmentVariableScope;
+      includingSensitive: boolean;
+      environment?: EnvironmentVariableEnvironment;
+      projectId: string;
+    }
+  ): Promise<EnvironmentVariableFragment[]> {
+    if (scope === EnvironmentVariableScope.Project && environment) {
+      if (includingSensitive) {
+        return await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(graphqlClient, {
+          appId: projectId,
+          environment,
+        });
+      }
+      return await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
+    }
+
+    return includingSensitive
+      ? await EnvironmentVariablesQuery.sharedWithSensitiveAsync(graphqlClient, {
+          appId: projectId,
+        })
+      : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, { appId: projectId });
+  }
 }

packages/eas-cli/src/commands/env/pull.ts

@@ -0,0 +1,80 @@
+import { Flags } from '@oclif/core';
+import * as fs from 'fs-extra';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag, EASNonInteractiveFlag } from '../../commandUtils/flags';
+import { EnvironmentVariableFragment } from '../../graphql/generated';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { confirmAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentValuePull extends EasCommand {
+  static override description = 'pull env file';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+    path: Flags.string({
+      description: 'Path to the result `.env` file',
+      default: '.env.local',
+    }),
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { environment, path: targetPath, 'non-interactive': nonInteractive },
+    } = await this.parse(EnvironmentValuePull);
+
+    if (!environment) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentValuePull, {
+      nonInteractive,
+    });
+
+    targetPath = targetPath ?? '.env.local';
+
+    const environmentVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        environment,
+      }
+    );
+
+    if (!nonInteractive && (await fs.exists(targetPath))) {
+      const result = await confirmAsync({
+        message: `File ${targetPath} already exists. Do you want to overwrite it?`,
+      });
+      if (!result) {
+        Log.log('Aborting...');
+        throw new Error(`File ${targetPath} already exists.`);
+      }
+    }
+
+    const filePrefix = `# Environment: ${environment}\n\n`;
+
+    const envFileContent = environmentVariables
+      .map((variable: EnvironmentVariableFragment) => {
+        if (variable.value === null) {
+          return `# ${variable.name}=***** (secret variables are not available for reading)`;
+        }
+        return `${variable.name}=${variable.value}`;
+      })
+      .join('\n');
+    await fs.writeFile(targetPath, filePrefix + envFileContent);
+
+    Log.log(`Pulled environment variables from ${environment} environment to ${targetPath}.`);
+  }
+}

packages/eas-cli/src/commands/env/push.ts

@@ -0,0 +1,210 @@
+import { Flags } from '@oclif/core';
+import dotenv from 'dotenv';
+import fs from 'fs-extra';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag } from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+  EnvironmentVariableVisibility,
+} from '../../graphql/generated';
+import {
+  EnvironmentVariableMutation,
+  EnvironmentVariablePushInput,
+} from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { confirmAsync, promptAsync } from '../../prompts';
+
+type PushFlags = {
+  environment?: EnvironmentVariableEnvironment;
+  path: string;
+};
+
+export default class EnvironmentVariablePush extends EasCommand {
+  static override description = 'push env file';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    ...EASEnvironmentFlag,
+    path: Flags.string({
+      description: 'Path to the input `.env` file',
+      default: '.env.local',
+    }),
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariablePush);
+
+    const { environment, path: envPath } = this.validateFlags(flags);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariablePush, {
+      nonInteractive: false,
+    });
+
+    const updateVariables: Record<string, EnvironmentVariablePushInput> =
+      await this.parseEnvFileAsync(envPath, environment);
+
+    const variableNames = Object.keys(updateVariables);
+
+    const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+      filterNames: variableNames,
+    });
+
+    const existingDifferentVariables: EnvironmentVariableFragment[] = [];
+    // Remove variables that are the same as the ones in the environment
+    existingVariables.forEach(variable => {
+      const existingVariableUpdate = updateVariables[variable.name];
+      if (existingVariableUpdate && existingVariableUpdate.value !== variable.value) {
+        existingDifferentVariables.push(variable);
+      } else {
+        delete updateVariables[variable.name];
+      }
+    });
+
+    const existingDifferentSharedVariables = existingDifferentVariables.filter(
+      variable => variable.scope === EnvironmentVariableScope.Shared
+    );
+
+    if (existingDifferentSharedVariables.length > 0) {
+      const existingDifferentSharedVariablesNames = existingDifferentSharedVariables.map(
+        variable => variable.name
+      );
+      Log.error('Shared variables cannot be overwritten by eas env:push command.');
+      Log.error('Remove them from the env file or unlink them from the project to continue:');
+      existingDifferentSharedVariablesNames.forEach(name => {
+        Log.error(`- ${name}`);
+      });
+      throw new Error('Shared variables cannot be overwritten by eas env:push command');
+    }
+
+    if (existingDifferentVariables.length > 0) {
+      Log.warn('Some variables already exist in the environment.');
+      const variableNames = existingDifferentVariables.map(variable => variable.name);
+
+      const confirmationMessage =
+        variableNames.length > 1
+          ? `The ${variableNames.join(
+              ', '
+            )} environment variables already exist in ${environment} environment. Do you want to override them all?`
+          : `The ${variableNames[0]} environment variable already exists in ${environment} environment. Do you want to override it?`;
+
+      const confirm = await confirmAsync({
+        message: confirmationMessage,
+      });
+
+      let variablesToOverwrite: string[] = [];
+
+      if (!confirm && existingDifferentVariables.length === 1) {
+        throw new Error('No new variables to push.');
+      }
+
+      if (confirm) {
+        variablesToOverwrite = existingDifferentVariables.map(variable => variable.name);
+      } else {
+        const promptResult = await promptAsync({
+          type: 'multiselect',
+          name: 'variablesToOverwrite',
+          message: 'Select variables to overwrite:',
+          // @ts-expect-error property missing from `@types/prompts`
+          optionsPerPage: 20,
+          choices: existingDifferentVariables.map(variable => ({
+            title: `${variable.name}: ${updateVariables[variable.name].value} (was ${
+              variable.value ?? '(secret)'
+            })`,
+            value: variable.name,
+          })),
+        });
+        variablesToOverwrite = promptResult.variablesToOverwrite;
+      }
+
+      for (const existingVariable of existingVariables) {
+        const name = existingVariable.name;
+        if (variablesToOverwrite.includes(name)) {
+          updateVariables[name]['overwrite'] = true;
+        } else {
+          delete updateVariables[name];
+        }
+      }
+    }
+
+    // Check if any of the sensitive variables already exist in the environment. Prompt the user to overwrite them.
+    const existingSensitiveVariables = existingVariables.filter(
+      variable => variable.value === null
+    );
+
+    if (existingSensitiveVariables.length > 0) {
+      const existingSensitiveVariablesNames = existingSensitiveVariables.map(
+        variable => `- ${variable.name}`
+      );
+      const confirm = await confirmAsync({
+        message: `You are about to overwrite sensitive variables.\n${existingSensitiveVariablesNames.join(
+          '\n'
+        )}\n Do you want to continue?`,
+      });
+      if (!confirm) {
+        throw new Error('Aborting...');
+      }
+    }
+
+    const variablesToPush = Object.values(updateVariables);
+
+    if (variablesToPush.length === 0) {
+      Log.log('No new variables to push.');
+      return;
+    }
+
+    await EnvironmentVariableMutation.createBulkEnvironmentVariablesForAppAsync(
+      graphqlClient,
+      variablesToPush,
+      projectId
+    );
+
+    Log.log(`Uploaded env file to ${environment} environment.`);
+  }
+
+  private async parseEnvFileAsync(
+    envPath: string,
+    environment: string
+  ): Promise<Record<string, EnvironmentVariablePushInput>> {
+    if (!(await fs.exists(envPath))) {
+      throw new Error(`File ${envPath} does not exist.`);
+    }
+    const pushInput: Record<string, EnvironmentVariablePushInput> = {};
+
+    const variables: Record<string, string> = dotenv.parse(await fs.readFile(envPath, 'utf8'));
+
+    for (const [name, value] of Object.entries(variables)) {
+      pushInput[name] = {
+        name,
+        value,
+        environment,
+        visibility: name.startsWith('EXPO_SENSITIVE')
+          ? EnvironmentVariableVisibility.Sensitive
+          : EnvironmentVariableVisibility.Public,
+      };
+    }
+
+    return pushInput;
+  }
+
+  private validateFlags(flags: PushFlags): Required<PushFlags> {
+    if (!flags.environment) {
+      throw new Error('Please provide an environment to push the env file to.');
+    }
+
+    return { ...flags, environment: flags.environment };
+  }
+}

packages/eas-cli/src/commands/env/unlink.ts

@@ -46,11 +46,10 @@ export default class EnvironmentVariableUnlink extends EasCommand {
 
     const projectDisplayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
 
-    const appVariables = await EnvironmentVariablesQuery.byAppIdAsync(
-      graphqlClient,
-      projectId,
-      environment
-    );
+    const appVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+    });
     const linkedVariables = appVariables.filter(
       ({ scope }) => scope === EnvironmentVariableScope.Shared
     );

packages/eas-cli/src/commands/env/update.ts

@@ -80,11 +80,10 @@ export default class EnvironmentVariableUpdate extends EasCommand {
       if (!environment) {
         environment = await promptVariableEnvironmentAsync(nonInteractive);
       }
-      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(
-        graphqlClient,
-        projectId,
-        environment
-      );
+      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
       if (!name) {
         name = await selectAsync(
           'Select variable',
@@ -134,7 +133,9 @@ export default class EnvironmentVariableUpdate extends EasCommand {
         `Updated variable ${chalk.bold(name)} on project ${chalk.bold(projectDisplayName)}.`
       );
     } else if (scope === EnvironmentVariableScope.Shared) {
-      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, projectId);
+      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+        appId: projectId,
+      });
 
       if (!name) {
         name = await selectAsync(

packages/eas-cli/src/commands/metadata/lint.ts

@@ -60,7 +60,8 @@ export default class MetadataLint extends EasCommand {
       await loadConfigAsync({ projectDir, profile: submitProfile });
 
       if (flags.json) {
-        return printJsonOnlyOutput([]);
+        printJsonOnlyOutput([]);
+        return;
       }
 
       Log.log('✅ Store configuration is valid.');
@@ -70,7 +71,8 @@ export default class MetadataLint extends EasCommand {
       }
 
       if (flags.json) {
-        return printJsonOnlyOutput(error.errors);
+        printJsonOnlyOutput(error.errors);
+        return;
       }
 
       logMetadataValidationError(error);

packages/eas-cli/src/commands/project/onboarding.ts

@@ -273,7 +273,7 @@ export default class Onboarding extends EasCommand {
     Log.log('🎉 We finished configuring your project.');
     Log.log();
     if (
-      app.githubRepository ||
+      !!app.githubRepository ||
       actor.preferences.onboarding.environment === OnboardingEnvironment.ExpoGo
     ) {
       Log.log('🚀 You can now go back to the website to continue:');

packages/eas-cli/src/commands/update/__tests__/index.test.ts

@@ -70,20 +70,6 @@ describe(UpdatePublish.name, () => {
     jest.mocked(PublishMutation.publishUpdateGroupAsync).mockClear();
   });
 
-  // Deprecated and split to a new command: update:republish
-  it('errors with --republish', async () => {
-    await expect(new UpdatePublish(['--republish'], commandOptions).run()).rejects.toThrow(
-      '--group and --republish flags are deprecated'
-    );
-  });
-
-  // Deprecated and split to a new command: update:republish
-  it('errors with --group', async () => {
-    await expect(new UpdatePublish(['--group=abc123'], commandOptions).run()).rejects.toThrow(
-      '--group and --republish flags are deprecated'
-    );
-  });
-
   it('errors with both --channel and --branch', async () => {
     const flags = ['--channel=channel123', '--branch=branch123'];
 
@@ -152,16 +138,7 @@ describe(UpdatePublish.name, () => {
 
     // Add configuration to the project that should not be included in the update
     const { appJson } = mockTestProject({
-      expoConfig: {
-        hooks: {
-          postPublish: [
-            {
-              file: 'custom-hook.js',
-              config: { some: 'config' },
-            },
-          ],
-        },
-      },
+      expoConfig: {},
     });
 
     const { platforms, runtimeVersion } = mockTestExport({ platforms: ['ios'] });

packages/eas-cli/src/commands/update/__tests__/republish.test.ts

@@ -55,7 +55,9 @@ jest.mock('../../../utils/code-signing');
 jest.mock('../../../fetch');
 
 describe(UpdateRepublish.name, () => {
-  afterEach(() => vol.reset());
+  afterEach(() => {
+    vol.reset();
+  });
 
   it('errors when providing both --group and --branch', async () => {
     const flags = ['--group=1234', '--branch=main'];

packages/eas-cli/src/commands/update/__tests__/roll-back-to-embedded.test.ts

@@ -68,7 +68,9 @@ jest.mock('../../../project/publish', () => ({
 }));
 
 describe(UpdateRollBackToEmbedded.name, () => {
-  afterEach(() => vol.reset());
+  afterEach(() => {
+    vol.reset();
+  });
 
   it('errors with both --channel and --branch', async () => {
     const flags = ['--channel=channel123', '--branch=branch123'];
@@ -142,16 +144,7 @@ describe(UpdateRollBackToEmbedded.name, () => {
 
     // Add configuration to the project that should not be included in the update
     mockTestProject({
-      expoConfig: {
-        hooks: {
-          postPublish: [
-            {
-              file: 'custom-hook.js',
-              config: { some: 'config' },
-            },
-          ],
-        },
-      },
+      expoConfig: {},
     });
 
     const platforms = ['ios'];

packages/eas-cli/src/commands/update/edit.ts

@@ -0,0 +1,143 @@
+import { Flags } from '@oclif/core';
+import assert from 'assert';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { PublishMutation } from '../../graphql/mutations/PublishMutation';
+import { UpdateQuery } from '../../graphql/queries/UpdateQuery';
+import Log from '../../log';
+import { promptAsync } from '../../prompts';
+import {
+  formatUpdateGroup,
+  getUpdateGroupDescriptions,
+  getUpdateJsonInfosForUpdates,
+} from '../../update/utils';
+import { enableJsonOutput, printJsonOnlyOutput } from '../../utils/json';
+
+export default class UpdateEdit extends EasCommand {
+  static override description = 'edit all the updates in an update group';
+  static override hidden = true;
+
+  static override args = [
+    {
+      name: 'groupId',
+      required: true,
+      description: 'The ID of an update group to edit.',
+    },
+  ];
+
+  static override flags = {
+    'rollout-percentage': Flags.integer({
+      description: `Rollout percentage to set for a rollout update. The specified number must be an integer between 1 and 100.`,
+      required: false,
+      min: 0,
+      max: 100,
+    }),
+    ...EasNonInteractiveAndJsonFlags,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const {
+      args: { groupId },
+      flags: {
+        'rollout-percentage': rolloutPercentage,
+        json: jsonFlag,
+        'non-interactive': nonInteractive,
+      },
+    } = await this.parse(UpdateEdit);
+
+    const {
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(UpdateEdit, { nonInteractive });
+
+    if (jsonFlag) {
+      enableJsonOutput();
+    }
+
+    const proposedUpdatesToEdit = (
+      await UpdateQuery.viewUpdateGroupAsync(graphqlClient, { groupId })
+    ).map(u => ({ updateId: u.id, rolloutPercentage: u.rolloutPercentage }));
+
+    const updatesToEdit = proposedUpdatesToEdit.filter(
+      (u): u is { updateId: string; rolloutPercentage: number } =>
+        u.rolloutPercentage !== null && u.rolloutPercentage !== undefined
+    );
+
+    if (updatesToEdit.length === 0) {
+      throw new Error('Cannot edit rollout percentage on update group that is not a rollout.');
+    }
+
+    const rolloutPercentagesSet = new Set(updatesToEdit.map(u => u.rolloutPercentage));
+    if (rolloutPercentagesSet.size !== 1) {
+      throw new Error(
+        'Cannot edit rollout percentage for a group with non-equal percentages for updates in the group.'
+      );
+    }
+
+    const previousPercentage = updatesToEdit[0].rolloutPercentage;
+
+    if (nonInteractive && rolloutPercentage === undefined) {
+      throw new Error('Must specify --rollout-percentage in non-interactive mode');
+    }
+
+    let rolloutPercentageToSet = rolloutPercentage;
+    if (rolloutPercentageToSet === undefined) {
+      const { percentage } = await promptAsync({
+        type: 'number',
+        message: `New rollout percentage (min: ${previousPercentage}, max: 100)`,
+        validate: value => {
+          if (value <= previousPercentage) {
+            return `Rollout percentage must be greater than previous rollout percentage (${previousPercentage})`;
+          } else if (value > 100) {
+            return `Rollout percentage must not be greater than 100`;
+          } else {
+            return true;
+          }
+        },
+        name: 'percentage',
+      });
+
+      if (!percentage) {
+        Log.log('Aborted.');
+        return;
+      }
+
+      rolloutPercentageToSet = percentage;
+    }
+
+    assert(rolloutPercentageToSet !== undefined);
+
+    if (rolloutPercentageToSet < previousPercentage) {
+      throw new Error(
+        `Rollout percentage must be greater than previous rollout percentage (${previousPercentage})`
+      );
+    } else if (rolloutPercentageToSet > 100) {
+      throw new Error('Rollout percentage must not be greater than 100');
+    }
+
+    const updatedUpdates = await Promise.all(
+      updatesToEdit.map(async u => {
+        return await PublishMutation.setRolloutPercentageAsync(
+          graphqlClient,
+          u.updateId,
+          rolloutPercentageToSet!
+        );
+      })
+    );
+
+    if (jsonFlag) {
+      printJsonOnlyOutput(getUpdateJsonInfosForUpdates(updatedUpdates));
+    } else {
+      const [updateGroupDescription] = getUpdateGroupDescriptions([updatedUpdates]);
+
+      Log.log(chalk.bold('Update group:'));
+
+      Log.log(formatUpdateGroup(updateGroupDescription));
+    }
+  }
+}

packages/eas-cli/src/commands/update/index.ts

@@ -1,4 +1,3 @@
-import { Platform as PublishPlatform } from '@expo/config';
 import { Workflow } from '@expo/eas-build-job';
 import { Errors, Flags } from '@oclif/core';
 import chalk from 'chalk';
@@ -16,6 +15,7 @@ import {
   StatuspageServiceName,
   UpdateInfoGroup,
   UpdatePublishMutation,
+  UpdateRolloutInfoGroup,
 } from '../../graphql/generated';
 import { PublishMutation } from '../../graphql/mutations/PublishMutation';
 import Log, { learnMore, link } from '../../log';
@@ -23,17 +23,17 @@ import { ora } from '../../ora';
 import { RequestedPlatform } from '../../platform';
 import { getOwnerAccountForProjectIdAsync } from '../../project/projectUtils';
 import {
-  ExpoCLIExportPlatformFlag,
   RawAsset,
+  UpdatePublishPlatform,
   buildBundlesAsync,
   buildUnsortedUpdateInfoGroupAsync,
   collectAssetsAsync,
   defaultPublishPlatforms,
-  filterExportedPlatformsByFlag,
+  filterCollectedAssetsByRequestedPlatforms,
   generateEasMetadataAsync,
   getBranchNameForCommandAsync,
-  getRequestedPlatform,
   getRuntimeToPlatformMappingFromRuntimeVersions,
+  getRuntimeToUpdateRolloutInfoGroupMappingAsync,
   getRuntimeVersionObjectAsync,
   getUpdateMessageForCommandAsync,
   isUploadedAssetCountAboveWarningThreshold,
@@ -66,18 +66,15 @@ type RawUpdateFlags = {
   'skip-bundler': boolean;
   'clear-cache': boolean;
   'private-key-path'?: string;
-  'non-interactive': boolean;
   'emit-metadata': boolean;
+  'rollout-percentage'?: number;
+  'non-interactive': boolean;
   json: boolean;
-  /** @deprecated see UpdateRepublish command */
-  group?: string;
-  /** @deprecated see UpdateRepublish command */
-  republish?: boolean;
 };
 
 type UpdateFlags = {
   auto: boolean;
-  platform: ExpoCLIExportPlatformFlag;
+  platform: RequestedPlatform;
   branchName?: string;
   channelName?: string;
   updateMessage?: string;
@@ -85,9 +82,10 @@ type UpdateFlags = {
   skipBundler: boolean;
   clearCache: boolean;
   privateKeyPath?: string;
+  emitMetadata: boolean;
+  rolloutPercentage?: number;
   json: boolean;
   nonInteractive: boolean;
-  emitMetadata: boolean;
 };
 
 export default class UpdatePublish extends EasCommand {
@@ -107,14 +105,6 @@ export default class UpdatePublish extends EasCommand {
       description: 'A short message describing the update',
       required: false,
     }),
-    republish: Flags.boolean({
-      description: 'Republish an update group (deprecated, see republish command)',
-      exclusive: ['input-dir', 'skip-bundler'],
-    }),
-    group: Flags.string({
-      description: 'Update group to republish (deprecated, see republish command)',
-      exclusive: ['input-dir', 'skip-bundler'],
-    }),
     'input-dir': Flags.string({
       description: 'Location of the bundle',
       default: 'dist',
@@ -132,6 +122,13 @@ export default class UpdatePublish extends EasCommand {
       description: `Emit "eas-update-metadata.json" in the bundle folder with detailed information about the generated updates`,
       default: false,
     }),
+    'rollout-percentage': Flags.integer({
+      description: `Percentage of users this update should be immediately available to. Users not in the rollout will be served the previous latest update on the branch, even if that update is itself being rolled out. The specified number must be an integer between 1 and 100. When not specified, this defaults to 100.`,
+      required: false,
+      hidden: true,
+      min: 0,
+      max: 100,
+    }),
     platform: Flags.enum({
       char: 'p',
       options: [
@@ -165,7 +162,7 @@ export default class UpdatePublish extends EasCommand {
     const paginatedQueryOptions = getPaginatedQueryOptions(rawFlags);
     const {
       auto: autoFlag,
-      platform: platformFlag,
+      platform: requestedPlatform,
       channelName: channelNameArg,
       updateMessage: updateMessageArg,
       inputDir,
@@ -176,6 +173,7 @@ export default class UpdatePublish extends EasCommand {
       nonInteractive,
       branchName: branchNameArg,
       emitMetadata,
+      rolloutPercentage,
     } = this.sanitizeFlags(rawFlags);
 
     const {
@@ -204,7 +202,7 @@ export default class UpdatePublish extends EasCommand {
 
     await ensureEASUpdateIsConfiguredAsync({
       exp: expPossiblyWithoutEasUpdateConfigured,
-      platform: getRequestedPlatform(platformFlag),
+      platform: requestedPlatform,
       projectDir,
       projectId,
       vcsClient,
@@ -237,7 +235,13 @@ export default class UpdatePublish extends EasCommand {
     if (!skipBundler) {
       const bundleSpinner = ora().start('Exporting...');
       try {
-        await buildBundlesAsync({ projectDir, inputDir, exp, platformFlag, clearCache });
+        await buildBundlesAsync({
+          projectDir,
+          inputDir,
+          exp,
+          platformFlag: requestedPlatform,
+          clearCache,
+        });
         bundleSpinner.succeed('Exported bundle(s)');
       } catch (e) {
         bundleSpinner.fail('Export failed');
@@ -252,12 +256,12 @@ export default class UpdatePublish extends EasCommand {
     let unsortedUpdateInfoGroups: UpdateInfoGroup = {};
     let uploadedAssetCount = 0;
     let assetLimitPerUpdateGroup = 0;
-    let realizedPlatforms: PublishPlatform[] = [];
+    let realizedPlatforms: UpdatePublishPlatform[] = [];
 
     try {
       const collectedAssets = await collectAssetsAsync(distRoot);
-      const assets = filterExportedPlatformsByFlag(collectedAssets, platformFlag);
-      realizedPlatforms = Object.keys(assets) as PublishPlatform[];
+      const assets = filterCollectedAssetsByRequestedPlatforms(collectedAssets, requestedPlatform);
+      realizedPlatforms = Object.keys(assets) as UpdatePublishPlatform[];
 
       // Timeout mechanism:
       // - Start with NO_ACTIVITY_TIMEOUT. 180 seconds is chosen because the cloud function that processes
@@ -350,7 +354,7 @@ export default class UpdatePublish extends EasCommand {
         Log.debug(chalk.dim(`- ${uploadedAssetPath}`));
       }
 
-      const platformString = (Object.keys(assets) as PublishPlatform[])
+      const platformString = realizedPlatforms
         .map(platform => {
           const collectedAssetForPlatform = nullthrows(assets[platform]);
           const totalAssetsForPlatform = collectedAssetForPlatform.assets.length + 1; // launch asset
@@ -388,6 +392,16 @@ export default class UpdatePublish extends EasCommand {
       branchName,
     });
 
+    const runtimeVersionToRolloutInfoGroup =
+      rolloutPercentage !== undefined
+        ? await getRuntimeToUpdateRolloutInfoGroupMappingAsync(graphqlClient, {
+            appId: projectId,
+            branchName,
+            rolloutPercentage,
+            runtimeToPlatformMapping,
+          })
+        : undefined;
+
     const gitCommitHash = await vcsClient.getCommitHashAsync();
     const isGitWorkingTreeDirty = await vcsClient.hasUncommittedChangesAsync();
 
@@ -401,9 +415,22 @@ export default class UpdatePublish extends EasCommand {
           ])
         );
 
+        const rolloutInfoGroupForRuntimeVersion = runtimeVersionToRolloutInfoGroup
+          ? runtimeVersionToRolloutInfoGroup.get(runtimeVersion)
+          : null;
+        const localRolloutInfoGroup = rolloutInfoGroupForRuntimeVersion
+          ? Object.fromEntries(
+              platforms.map(platform => [
+                platform,
+                rolloutInfoGroupForRuntimeVersion[platform as keyof UpdateRolloutInfoGroup],
+              ])
+            )
+          : null;
+
         return {
           branchId,
           updateInfoGroup: localUpdateInfoGroup,
+          rolloutInfoGroup: localRolloutInfoGroup,
           runtimeVersion,
           message: updateMessage,
           gitCommitHash,
@@ -517,6 +544,22 @@ export default class UpdatePublish extends EasCommand {
               ? [{ label: 'Android update ID', value: newAndroidUpdate.id }]
               : []),
             ...(newIosUpdate ? [{ label: 'iOS update ID', value: newIosUpdate.id }] : []),
+            ...(newAndroidUpdate?.rolloutControlUpdate
+              ? [
+                  {
+                    label: 'Android Rollout',
+                    value: `${newAndroidUpdate.rolloutPercentage}% (Base update ID: ${newAndroidUpdate.rolloutControlUpdate.id})`,
+                  },
+                ]
+              : []),
+            ...(newIosUpdate?.rolloutControlUpdate
+              ? [
+                  {
+                    label: 'iOS Rollout',
+                    value: `${newIosUpdate.rolloutPercentage}% (Base update ID: ${newIosUpdate.rolloutControlUpdate.id})`,
+                  },
+                ]
+              : []),
             { label: 'Message', value: updateMessage ?? '' },
             ...(gitCommitHash
               ? [
@@ -557,23 +600,6 @@ export default class UpdatePublish extends EasCommand {
       );
     }
 
-    if (flags.group || flags.republish) {
-      // Pick the first flag set that is defined, in this specific order
-      const args = [
-        ['--group', flags.group],
-        ['--branch', flags.branch],
-      ].filter(([_, value]) => value)[0];
-
-      Log.newLine();
-      Log.warn(
-        'The --group and --republish flags are deprecated, use the republish command instead:'
-      );
-      Log.warn(`  ${chalk.bold([`eas update:republish`, ...(args ?? [])].join(' '))}`);
-      Log.newLine();
-
-      Errors.error('--group and --republish flags are deprecated', { exit: 1 });
-    }
-
     const skipBundler = flags['skip-bundler'] ?? false;
     let emitMetadata = flags['emit-metadata'] ?? false;
 
@@ -594,6 +620,7 @@ export default class UpdatePublish extends EasCommand {
       clearCache: flags['clear-cache'],
       platform: flags.platform as RequestedPlatform,
       privateKeyPath: flags['private-key-path'],
+      rolloutPercentage: flags['rollout-percentage'],
       nonInteractive,
       emitMetadata,
       json: flags.json ?? false,

packages/eas-cli/src/commands/update/list.ts

@@ -53,10 +53,13 @@ export default class UpdateList extends EasCommand {
     }
 
     if (all) {
-      listAndRenderUpdateGroupsOnAppAsync(graphqlClient, { projectId, paginatedQueryOptions });
+      await listAndRenderUpdateGroupsOnAppAsync(graphqlClient, {
+        projectId,
+        paginatedQueryOptions,
+      });
     } else {
       if (branchFlag) {
-        listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
+        await listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
           projectId,
           branchName: branchFlag,
           paginatedQueryOptions,
@@ -81,7 +84,7 @@ export default class UpdateList extends EasCommand {
               offset: 0,
             },
         });
-        listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
+        await listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
           projectId,
           branchName: selectedBranch.name,
           paginatedQueryOptions,

packages/eas-cli/src/commands/update/roll-back-to-embedded.ts

@@ -24,10 +24,9 @@ import {
   getOwnerAccountForProjectIdAsync,
 } from '../../project/projectUtils';
 import {
-  ExpoCLIExportPlatformFlag,
+  UpdatePublishPlatform,
   defaultPublishPlatforms,
   getBranchNameForCommandAsync,
-  getRequestedPlatform,
   getRuntimeToPlatformMappingFromRuntimeVersions,
   getRuntimeVersionObjectAsync,
   getUpdateMessageForCommandAsync,
@@ -60,7 +59,7 @@ type RawUpdateFlags = {
 
 type UpdateFlags = {
   auto: boolean;
-  platform: ExpoCLIExportPlatformFlag;
+  platform: RequestedPlatform;
   branchName?: string;
   channelName?: string;
   updateMessage?: string;
@@ -150,7 +149,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
 
     await ensureEASUpdateIsConfiguredAsync({
       exp: expPossiblyWithoutEasUpdateConfigured,
-      platform: getRequestedPlatform(platformFlag),
+      platform: platformFlag,
       projectDir,
       projectId,
       vcsClient,
@@ -182,7 +181,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
       jsonFlag,
     });
 
-    const realizedPlatforms: PublishPlatform[] =
+    const realizedPlatforms: UpdatePublishPlatform[] =
       platformFlag === 'all' ? defaultPublishPlatforms : [platformFlag];
 
     const { branchId } = await ensureBranchExistsAsync(graphqlClient, {
@@ -300,7 +299,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
     updateMessage: string | undefined;
     branchId: string;
     codeSigningInfo: CodeSigningInfo | undefined;
-    runtimeVersions: { platform: string; runtimeVersion: string }[];
+    runtimeVersions: { platform: UpdatePublishPlatform; runtimeVersion: string }[];
     realizedPlatforms: PublishPlatform[];
   }): Promise<UpdatePublishMutation['updateBranch']['publishUpdateGroups']> {
     const runtimeToPlatformMapping =

packages/eas-cli/src/credentials/android/AndroidCredentialsProvider.ts

@@ -21,8 +21,8 @@ export default class AndroidCredentialsProvider {
   public readonly platform = Platform.ANDROID;
 
   constructor(
-    private ctx: CredentialsContext,
-    private options: Options
+    private readonly ctx: CredentialsContext,
+    private readonly options: Options
   ) {}
 
   public async getCredentialsAsync(

packages/eas-cli/src/credentials/android/actions/AssignFcm.ts

@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class AssignFcm {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/AssignGoogleServiceAccountKeyForFcmV1.ts

@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class AssignGoogleServiceAccountKeyForFcmV1 {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/AssignGoogleServiceAccountKeyForSubmissions.ts

@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class AssignGoogleServiceAccountKeyForSubmissions {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/CreateFcm.ts

@@ -4,7 +4,7 @@ import { promptAsync } from '../../../prompts';
 import { CredentialsContext } from '../../context';
 
 export class CreateFcm {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<AndroidFcmFragment> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/CreateGoogleServiceAccountKey.ts

@@ -12,7 +12,7 @@ import {
 } from '../utils/googleServiceAccountKey';
 
 export class CreateGoogleServiceAccountKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<GoogleServiceAccountKeyFragment> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/CreateKeystore.ts

@@ -9,7 +9,7 @@ import { generateRandomKeystoreAsync } from '../utils/keystore';
 import { getKeystoreWithType, validateKeystore } from '../utils/keystoreNew';
 
 export class CreateKeystore {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<AndroidKeystoreFragment> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/DownloadKeystore.ts

@@ -16,7 +16,7 @@ interface DownloadKeystoreOptions {
 }
 
 export class DownloadKeystore {
-  constructor(private options: DownloadKeystoreOptions) {}
+  constructor(private readonly options: DownloadKeystoreOptions) {}
 
   public async runAsync(
     ctx: CredentialsContext,
@@ -62,7 +62,7 @@ export class DownloadKeystore {
 }
 
 export class BackupKeystore {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/RemoveFcm.ts

@@ -4,7 +4,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams, formatProjectFullName } from '../api/GraphqlClient';
 
 export class RemoveFcm {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/RemoveGoogleServiceAccountKey.ts

@@ -5,7 +5,7 @@ import { CredentialsContext } from '../../context';
 import { selectGoogleServiceAccountKeyAsync } from '../utils/googleServiceAccountKey';
 
 export class SelectAndRemoveGoogleServiceAccountKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {
@@ -31,7 +31,7 @@ export class SelectAndRemoveGoogleServiceAccountKey {
 }
 
 export class RemoveGoogleServiceAccountKey {
-  constructor(private googleServiceAccountKey: GoogleServiceAccountKeyFragment) {}
+  constructor(private readonly googleServiceAccountKey: GoogleServiceAccountKeyFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/RemoveKeystore.ts

@@ -8,7 +8,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class RemoveKeystore {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/SetUpBuildCredentials.ts

@@ -26,7 +26,7 @@ interface Options {
  * @name: sets up build credentials for the specified configuration. If no name is specified, the default configuration is setup
  */
 export class SetUpBuildCredentials {
-  constructor(private options: Options) {}
+  constructor(private readonly options: Options) {}
 
   async runAsync(ctx: CredentialsContext): Promise<AndroidAppBuildCredentialsFragment> {
     const { app, name: maybeName } = this.options;

packages/eas-cli/src/credentials/android/actions/SetUpBuildCredentialsFromCredentialsJson.ts

@@ -15,7 +15,7 @@ import { AppLookupParams } from '../api/GraphqlClient';
 import { getKeystoreWithType } from '../utils/keystoreNew';
 
 export class SetUpBuildCredentialsFromCredentialsJson {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   async runAsync(ctx: CredentialsContext): Promise<AndroidAppBuildCredentialsFragment | null> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/SetUpGoogleServiceAccountKeyForFcmV1.ts

@@ -14,7 +14,7 @@ import { MissingCredentialsNonInteractiveError } from '../../errors';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class SetUpGoogleServiceAccountKeyForFcmV1 {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<CommonAndroidAppCredentialsFragment> {
     const isKeySetup = await this.isGoogleServiceAccountKeySetupAsync(ctx);

packages/eas-cli/src/credentials/android/actions/SetUpGoogleServiceAccountKeyForSubmissions.ts

@@ -14,7 +14,7 @@ import { MissingCredentialsNonInteractiveError } from '../../errors';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class SetUpGoogleServiceAccountKeyForSubmissions {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<CommonAndroidAppCredentialsFragment> {
     const isKeySetup = await this.isGoogleServiceAccountKeySetupAsync(ctx);

packages/eas-cli/src/credentials/android/actions/UseExistingGoogleServiceAccountKey.ts

@@ -4,7 +4,7 @@ import { CredentialsContext } from '../../context';
 import { selectGoogleServiceAccountKeyAsync } from '../utils/googleServiceAccountKey';
 
 export class UseExistingGoogleServiceAccountKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<GoogleServiceAccountKeyFragment | null> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/api/GraphqlClient.ts

@@ -279,7 +279,7 @@ export async function deleteKeystoreAsync(
   graphqlClient: ExpoGraphqlClient,
   keystore: AndroidKeystoreFragment
 ): Promise<void> {
-  return await AndroidKeystoreMutation.deleteAndroidKeystoreAsync(graphqlClient, keystore.id);
+  await AndroidKeystoreMutation.deleteAndroidKeystoreAsync(graphqlClient, keystore.id);
 }
 
 export async function createFcmAsync(
@@ -299,7 +299,7 @@ export async function deleteFcmAsync(
   graphqlClient: ExpoGraphqlClient,
   fcm: AndroidFcmFragment
 ): Promise<void> {
-  return await AndroidFcmMutation.deleteAndroidFcmAsync(graphqlClient, fcm.id);
+  await AndroidFcmMutation.deleteAndroidFcmAsync(graphqlClient, fcm.id);
 }
 
 export async function createGoogleServiceAccountKeyAsync(
@@ -318,7 +318,7 @@ export async function deleteGoogleServiceAccountKeyAsync(
   graphqlClient: ExpoGraphqlClient,
   googleServiceAccountKey: GoogleServiceAccountKeyFragment
 ): Promise<void> {
-  return await GoogleServiceAccountKeyMutation.deleteGoogleServiceAccountKeyAsync(
+  await GoogleServiceAccountKeyMutation.deleteGoogleServiceAccountKeyAsync(
     graphqlClient,
     googleServiceAccountKey.id
   );

packages/eas-cli/src/credentials/android/utils/__tests__/keystoreNew-test.ts

@@ -39,37 +39,49 @@ describe('validateKeystore', () => {
   it('validates a correctly formatted jks keystore', async () => {
     const keystoreWithType = getKeystoreWithType(testKeystore);
     expect(keystoreWithType.type).toBe(AndroidKeystoreType.Jks);
-    expect(() => validateKeystore(keystoreWithType)).not.toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).not.toThrow();
   });
   it('doesnt validate a jks keystore with wrong alias', async () => {
     const keystoreWithType = getKeystoreWithType({
       ...testKeystore,
       keyAlias: 'non-existent-alias',
     });
-    expect(() => validateKeystore(keystoreWithType)).toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).toThrow();
   });
   it('doesnt validate a jks keystore with wrong key password', async () => {
     const keystoreWithType = getKeystoreWithType({
       ...testKeystore,
       keyPassword: 'not-the-password',
     });
-    expect(() => validateKeystore(keystoreWithType)).toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).toThrow();
   });
   it('validates a correctly formatted pkcs 12 keystore', async () => {
     const keystoreWithType = getKeystoreWithType(testPKCS12Keystore);
     expect(keystoreWithType.type).toBe(AndroidKeystoreType.Pkcs12);
-    expect(() => validateKeystore(keystoreWithType)).not.toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).not.toThrow();
   });
   it('doesnt validate a PKCS 12 keystore with wrong alias', async () => {
     const keystoreWithType = getKeystoreWithType({
       ...testPKCS12Keystore,
       keyAlias: 'non-existent-alias',
     });
-    expect(() => validateKeystore(keystoreWithType)).toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).toThrow();
   });
   it('validates an PKCS 12 Keystore with an empty password', async () => {
     const keystoreWithType = getKeystoreWithType(testPKCS12EmptyPasswordKeystore);
     expect(keystoreWithType.type).toBe(AndroidKeystoreType.Pkcs12);
-    expect(() => validateKeystore(keystoreWithType)).not.toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).not.toThrow();
   });
 });

packages/eas-cli/src/credentials/context.ts

@@ -35,10 +35,10 @@ export class CredentialsContext {
 
   private shouldAskAuthenticateAppStore: boolean = true;
 
-  private projectInfo: CredentialsContextProjectInfo | null;
+  private readonly projectInfo: CredentialsContextProjectInfo | null;
 
   constructor(
-    private options: {
+    private readonly options: {
       // if null, this implies not running in a project context
       projectInfo: CredentialsContextProjectInfo | null;
       easJsonCliConfig?: EasJson['cli'];
@@ -86,7 +86,7 @@ export class CredentialsContext {
   }
 
   async bestEffortAppStoreAuthenticateAsync(): Promise<void> {
-    if (this.appStore.authCtx || !this.shouldAskAuthenticateAppStore) {
+    if (!!this.appStore.authCtx || !this.shouldAskAuthenticateAppStore) {
       // skip prompts if already have apple ctx or already asked about it
       return;
     }

packages/eas-cli/src/credentials/ios/IosCredentialsProvider.ts

@@ -37,8 +37,8 @@ export default class IosCredentialsProvider {
   public readonly platform = Platform.IOS;
 
   constructor(
-    private ctx: CredentialsContext,
-    private options: Options
+    private readonly ctx: CredentialsContext,
+    private readonly options: Options
   ) {}
 
   public async getCredentialsAsync(
@@ -108,7 +108,7 @@ export default class IosCredentialsProvider {
       return null;
     } else if (
       ctx.easJsonCliConfig?.promptToConfigurePushNotifications === undefined &&
-      !(await isExpoNotificationsInstalled(ctx.projectDir))
+      !isExpoNotificationsInstalled(ctx.projectDir)
     ) {
       return null;
     }

packages/eas-cli/src/credentials/ios/__tests__/IosCredentialsProvider-test.ts

@@ -23,11 +23,7 @@ jest.mock('../validators/validateProvisioningProfile', () => ({
     _app: any,
     buildCredentials: Partial<IosAppBuildCredentialsFragment> | null
   ): Promise<boolean> => {
-    return !!(
-      buildCredentials &&
-      buildCredentials.distributionCertificate &&
-      buildCredentials.provisioningProfile
-    );
+    return !!(buildCredentials?.distributionCertificate && buildCredentials.provisioningProfile);
   },
 }));
 jest.mock('../../../project/ios/bundleIdentifier');

packages/eas-cli/src/credentials/ios/actions/AscApiKeyUtils.ts

@@ -202,7 +202,7 @@ export async function selectAscApiKeysFromAccountAsync(
     }
     return null;
   }
-  return selectAscApiKeysAsync(ascApiKeysForAccount);
+  return await selectAscApiKeysAsync(ascApiKeysForAccount);
 }
 
 async function selectAscApiKeysAsync(

packages/eas-cli/src/credentials/ios/actions/AssignAscApiKey.ts

@@ -9,7 +9,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 
 export class AssignAscApiKey {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/ios/actions/AssignPushKey.ts

@@ -5,7 +5,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 
 export class AssignPushKey {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/ios/actions/ConfigureProvisioningProfile.ts

@@ -21,10 +21,10 @@ import { Target } from '../types';
 
 export class ConfigureProvisioningProfile {
   constructor(
-    private app: AppLookupParams,
-    private target: Target,
-    private distributionCertificate: AppleDistributionCertificateFragment,
-    private originalProvisioningProfile: AppleProvisioningProfileFragment
+    private readonly app: AppLookupParams,
+    private readonly target: Target,
+    private readonly distributionCertificate: AppleDistributionCertificateFragment,
+    private readonly originalProvisioningProfile: AppleProvisioningProfileFragment
   ) {}
 
   public async runAsync(

packages/eas-cli/src/credentials/ios/actions/CreateAscApiKey.ts

@@ -3,7 +3,7 @@ import { AccountFragment, AppStoreConnectApiKeyFragment } from '../../../graphql
 import { CredentialsContext } from '../../context';
 
 export class CreateAscApiKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/ios/actions/CreateDistributionCertificate.ts

@@ -5,7 +5,7 @@ import { CredentialsContext } from '../../context';
 import { AppleDistributionCertificateMutationResult } from '../api/graphql/mutations/AppleDistributionCertificateMutation';
 
 export class CreateDistributionCertificate {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(
     ctx: CredentialsContext

packages/eas-cli/src/credentials/ios/actions/CreateProvisioningProfile.ts

@@ -20,9 +20,9 @@ import { Target } from '../types';
 
 export class CreateProvisioningProfile {
   constructor(
-    private app: AppLookupParams,
-    private target: Target,
-    private distributionCertificate: AppleDistributionCertificateFragment
+    private readonly app: AppLookupParams,
+    private readonly target: Target,
+    private readonly distributionCertificate: AppleDistributionCertificateFragment
   ) {}
 
   async runAsync(ctx: CredentialsContext): Promise<AppleProvisioningProfileMutationResult> {

packages/eas-cli/src/credentials/ios/actions/CreatePushKey.ts

@@ -4,7 +4,7 @@ import Log from '../../../log';
 import { CredentialsContext } from '../../context';
 
 export class CreatePushKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<ApplePushKeyFragment> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/ios/actions/DistributionCertificateUtils.ts

@@ -100,17 +100,17 @@ export async function selectDistributionCertificateWithDependenciesAsync(
     return null;
   }
   if (!ctx.appStore.authCtx) {
-    return selectDistributionCertificateAsync(distCertsForAccount);
+    return await selectDistributionCertificateAsync(distCertsForAccount);
   }
 
   // get valid certs on the developer portal
   const certInfoFromApple = await ctx.appStore.listDistributionCertificatesAsync();
-  const validDistCerts = await filterRevokedDistributionCertsFromEasServers(
+  const validDistCerts = filterRevokedDistributionCertsFromEasServers(
     distCertsForAccount,
     certInfoFromApple
   );
 
-  return selectDistributionCertificateAsync(distCertsForAccount, validDistCerts);
+  return await selectDistributionCertificateAsync(distCertsForAccount, validDistCerts);
 }
 
 /**
@@ -129,7 +129,7 @@ export async function selectValidDistributionCertificateAsync(
     return null;
   }
   if (!ctx.appStore.authCtx) {
-    return selectDistributionCertificateAsync(distCertsForAccount);
+    return await selectDistributionCertificateAsync(distCertsForAccount);
   }
 
   // filter by apple team
@@ -148,7 +148,7 @@ export async function selectValidDistributionCertificateAsync(
   Log.log(
     `${validDistCerts.length}/${distCertsForAccount.length} Distribution Certificates are currently valid for Apple Team ${ctx.appStore.authCtx?.team.id}.`
   );
-  return selectDistributionCertificateAsync(validDistCerts);
+  return await selectDistributionCertificateAsync(validDistCerts);
 }
 
 const APPLE_DIST_CERTS_TOO_MANY_GENERATED_ERROR = `

packages/eas-cli/src/credentials/ios/actions/ProvisioningProfileUtils.ts

@@ -29,7 +29,7 @@ export async function generateProvisioningProfileAsync(
   const appleAuthCtx = await ctx.appStore.ensureAuthenticatedAsync();
   const type = appleAuthCtx.team.inHouse ? 'Enterprise ' : 'AppStore';
   const profileName = `*[expo] ${bundleIdentifier} ${type} ${new Date().toISOString()}`; // Apple drops [ if its the first char (!!)
-  const applePlatform = await getApplePlatformFromTarget(target);
+  const applePlatform = getApplePlatformFromTarget(target);
   return await ctx.appStore.createProvisioningProfileAsync(
     bundleIdentifier,
     distCert,

packages/eas-cli/src/credentials/ios/actions/PushKeyUtils.ts

@@ -121,11 +121,11 @@ export async function selectPushKeyAsync(
     return null;
   }
   if (!ctx.appStore.authCtx) {
-    return selectPushKeysAsync(pushKeysForAccount);
+    return await selectPushKeysAsync(pushKeysForAccount);
   }
 
   const validPushKeys = await getValidAndTrackedPushKeysOnEasServersAsync(ctx, pushKeysForAccount);
-  return selectPushKeysAsync(pushKeysForAccount, validPushKeys);
+  return await selectPushKeysAsync(pushKeysForAccount, validPushKeys);
 }
 
 export async function getValidAndTrackedPushKeysOnEasServersAsync(

packages/eas-cli/src/credentials/ios/actions/RemoveAscApiKey.ts

@@ -5,7 +5,7 @@ import { confirmAsync } from '../../../prompts';
 import { CredentialsContext } from '../../context';
 
 export class SelectAndRemoveAscApiKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   async runAsync(ctx: CredentialsContext): Promise<void> {
     const selected = await selectAscApiKeysFromAccountAsync(ctx, this.account);
@@ -18,7 +18,7 @@ export class SelectAndRemoveAscApiKey {
 }
 
 export class RemoveAscApiKey {
-  constructor(private ascApiKey: AppStoreConnectApiKeyFragment) {}
+  constructor(private readonly ascApiKey: AppStoreConnectApiKeyFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/ios/actions/RemoveDistributionCertificate.ts

@@ -11,7 +11,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 
 export class SelectAndRemoveDistributionCertificate {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   async runAsync(ctx: CredentialsContext): Promise<void> {
     const selected = await selectDistributionCertificateWithDependenciesAsync(ctx, this.account);
@@ -25,8 +25,8 @@ export class SelectAndRemoveDistributionCertificate {
 
 export class RemoveDistributionCertificate {
   constructor(
-    private account: AccountFragment,
-    private distributionCertificate: AppleDistributionCertificateFragment
+    private readonly account: AccountFragment,
+    private readonly distributionCertificate: AppleDistributionCertificateFragment
   ) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<void> {

packages/eas-cli/src/credentials/ios/actions/RemoveProvisioningProfile.ts

@@ -7,8 +7,8 @@ import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 
 export class RemoveProvisioningProfiles {
   constructor(
-    private apps: AppLookupParams[],
-    private provisioningProfiles: AppleProvisioningProfileIdentifiersFragment[]
+    private readonly apps: AppLookupParams[],
+    private readonly provisioningProfiles: AppleProvisioningProfileIdentifiersFragment[]
   ) {
     assert(
       apps.length === provisioningProfiles.length,

packages/eas-cli/src/credentials/ios/actions/RemovePushKey.ts

@@ -5,7 +5,7 @@ import { confirmAsync } from '../../../prompts';
 import { CredentialsContext } from '../../context';
 
 export class SelectAndRemovePushKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   async runAsync(ctx: CredentialsContext): Promise<void> {
     const selected = await selectPushKeyAsync(ctx, this.account);
@@ -18,7 +18,7 @@ export class SelectAndRemovePushKey {
 }
 
 export class RemovePushKey {
-  constructor(private pushKey: ApplePushKeyFragment) {}
+  constructor(private readonly pushKey: ApplePushKeyFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/ios/actions/SetUpAdhocProvisioningProfile.ts

@@ -47,7 +47,7 @@ interface Options {
 }
 
 export class SetUpAdhocProvisioningProfile {
-  constructor(private options: Options) {}
+  constructor(private readonly options: Options) {}
 
   async runAsync(ctx: CredentialsContext): Promise<IosAppBuildCredentialsFragment> {
     const { app } = this.options;
@@ -133,7 +133,7 @@ export class SetUpAdhocProvisioningProfile {
     );
 
     // 4. Reuse or create the profile on Apple Developer Portal
-    const applePlatform = await getApplePlatformFromTarget(target);
+    const applePlatform = getApplePlatformFromTarget(target);
     const profileType =
       applePlatform === ApplePlatform.TV_OS
         ? ProfileType.TVOS_APP_ADHOC

packages/eas-cli/src/credentials/ios/actions/SetUpAscApiKey.ts

@@ -38,8 +38,8 @@ export class SetUpAscApiKey {
   ];
 
   constructor(
-    private app: AppLookupParams,
-    private purpose: AppStoreApiKeyPurpose
+    private readonly app: AppLookupParams,
+    private readonly purpose: AppStoreApiKeyPurpose
   ) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<CommonIosAppCredentialsFragment> {

packages/eas-cli/src/credentials/ios/actions/SetUpBuildCredentials.ts

@@ -16,7 +16,7 @@ interface Options {
 }
 
 export class SetUpBuildCredentials {
-  constructor(private options: Options) {}
+  constructor(private readonly options: Options) {}
 
   async runAsync(ctx: CredentialsContext): Promise<IosCredentials> {
     const hasManyTargets = this.options.targets.length > 1;