# Cardinal Songbird Integration Update

{% hint style="warning" %}
**Not sure if this affects you?** If your role is not related to technical integrations — for example reconciliation, reporting, or operations — please **forward this page to your technical or development team**. If you are unsure who that is, your IT contact or e-commerce manager is a good starting point.
{% endhint %}

This post is to inform you of an upcoming change to the Cardinal Songbird JavaScript library that may require action from your technical team **before 17th June 2026.**

***

#### What Is Changing

Visa is implementing **Subresource Integrity (SRI)** in the Songbird JavaScript library and shifting the deployment process from a single release to a **quarterly release cadence**. Each release will include a new URL path with semantic versioning and a corresponding hash value.

With this new release schedule, **Visa will not support versions older than 18 months**. Integrations must be kept up to date with each quarterly release, or they risk service interruption when unsupported versions are decommissioned.

The current migration to **v2.1.0** is the first release under this new model and must be completed by **17th June 2026**.

***

#### Does This Apply To You?

<table data-card-size="large" data-view="cards"><thead><tr><th></th><th></th><th></th></tr></thead><tbody><tr><td><h4><img src="data:image/png;base64,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" alt="OK">  No Action Required</h4></td><td>Verifone Hosted Checkout</td><td>If you use the <strong>Verifone Hosted Payment Page (HPP)</strong> exclusively, Songbird is managed by Verifone. <strong>No changes are required on your side.</strong></td></tr><tr><td><h4><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAABAUlEQVR4nO2YWxLCIAxFwXETuk1dht2mLgO/cDoMoRByqS33/JOEe/qizhFCoLwfLiDrX5DFRwDdQEwfaYEGJNLUURZoIIeUNsICDaRspWxtgQbW1KZraYEGIq2pWlmgAef0aVpYoIHeFHvXH96A71kspXd7yaF+nvmW90U3y+ENqDdg/U2jrTenAdTpSlN3PgPo/zyt9ecygE5f02ceA6PSb+03h4HR6bf0Pb+BvdKv7X9FNJU+mREUDeydfqQ0B8RAZH2wQVkRDfSmn57KSqe0GqR5IE8hadjeTeTIbuBfrv2U3Fznew9YpC/dsBY3cjof9IEdQvg1896PezmQgXwBTb5zYUZG+L8AAAAASUVORK5CYII=" alt="!">Action Required</h4></td><td>Direct / Custom Integration</td><td>If your site or app <strong>directly embeds the Cardinal Songbird script</strong>, your team must update the URL and hash before <strong>17th June 2026</strong>.</td></tr></tbody></table>

***

#### What Your Technical Team Needs To Do

A full integration guide is attached as a PDF below. In summary, your development or integration team will need to:

1. **Update the Songbird script URL**

   Replace the existing Songbird script URL with the new v2.1.0 versioned URL for your environment (staging or production).
2. **Add the integrity and crossorigin attributes**

   Include the SHA-384 hash and crossorigin="anonymous" on the script tag. Both are required — one without the other provides no security benefit.
3. **Test in staging before promoting to production**

   Verify the full 3DS authentication flow completes successfully in your non-production environment before deploying to live.

{% hint style="warning" %}
**Deadline: 17th June 2026.**  Legacy Songbird endpoints will be decommissioned following Cardinal's data centre migration. Integrations not updated by this date may experience service interruption.
{% endhint %}

{% hint style="info" icon="paperclip" %}
**Attached:** Cardinal Songbird v2.1.0 — Integration Guide (PDF)
\
Includes implementation examples for Plain HTML, React, Next.js, Angular, Vue, and PHP, plus environment configuration guidance and a verification checklist.&#x20;

[<mark style="color:$success;">**Click here to download the Integration Guide (PDF)**</mark>](https://files.gitbook.com/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FvDGc88JdibqKr5ck81hW%2Fuploads%2FEMxw8Hn5oUj3Jayzg5jn%2FVerifone_CardinalSongbird_v2.1.0_Migration%20Guide.pdf?alt=media\&token=a595cba4-d326-4488-970b-67777ce5be0a)
{% endhint %}

***

#### Support

If you encounter issues during migration, contact the appropriate Verifone support team based on the environment you are working in:

<table><thead><tr><th>Environment</th><th width="224">Team</th><th>Contact</th></tr></thead><tbody><tr><td>Staging / Non-Production</td><td>Technical Services</td><td><a href="mailto:uk.techservices@verifone.com">uk.techservices@verifone.com</a></td></tr><tr><td>Production</td><td>Merchant Helpdesk</td><td><a href="mailto:uk.helpdesk@verifone.com">uk.helpdesk@verifone.com</a></td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://helpcenter.verifone.com/cardinal-songbird-integration-update.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.