Install Error: Could not find org.jfrog.cardinalcommerce.gradle:cardinalmobilesdk:2.2.7-2

[sforsberg]

Describe the bug
Starting April 3rd 2024, it is no longer possible to install this package without making some modifications to the build.gradle to specify an existing version of org.jfrog.cardinalcommerce.gradle:cardinalmobilesdk.

During app building, developers are now presented with the following error:

FAILURE: Build failed with an exception.

* What went wrong:
Could not determine the dependencies of task ':app:processDebugResources'.
> Could not resolve all task dependencies for configuration ':app:debugRuntimeClasspath'.
   > Could not find org.jfrog.cardinalcommerce.gradle:cardinalmobilesdk:2.2.7-2.
     Searched in the following locations:
       - https://dl.google.com/dl/android/maven2/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://perimeterx.jfrog.io/artifactory/px-Android-SDK/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://salesforce-marketingcloud.github.io/MarketingCloudSDK-Android/repository/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://maven.google.com/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://mobile-sdks.forter.com/android/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://cardinalcommerceprod.jfrog.io/artifactory/android/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://zowie.jfrog.io/artifactory/zowie-android-sdk/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - file:/Users/sforsberg/dev/tw_mobile/android/app/libs/cardinalmobilesdk-2.2.7-2.jar
       - file:/Users/sforsberg/dev/tw_mobile/android/app/libs/cardinalmobilesdk.jar
       - https://oss.sonatype.org/content/repositories/snapshots/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://repo.maven.apache.org/maven2/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - file:/Users/sforsberg/dev/tw_mobile/node_modules/jsc-android/dist/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
       - https://www.jitpack.io/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-2/cardinalmobilesdk-2.2.7-2.pom
     Required by:
         project :app > com.paypal.checkout:android-sdk:1.3.0

To Reproduce
Steps to reproduce the behavior:

1. Add the latest version of implementation('com.paypal.checkout:android-sdk:1.3.0') to your project's build.gradle
2. Try to build your project.
3. See the above error.

Expected behavior
The project should build without having to modify the dependency versions within com.paypal.checkout:android-sdk.

Additional context
While investigating the issue, it was discovered that the desired version 2.2.7-2 no longer exists in the Maven repo. This may be a larger issue, but JFrog was updated on April 3rd, 2024 when presumably this version was removed from the repo.

Get the metadata of the repo:

curl --location 'https://cardinalcommerceprod.jfrog.io/artifactory/android/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/maven-metadata.xml' \
--header 'Authorization: Basic YnJhaW50cmVlX3RlYW1fc2RrOkFLQ3A4alFjb0R5Mmh4U1doREFVUUtYTERQRHg2TllSa3FyZ0ZMUmMzcURyYXlnNnJyQ2JKcHNLS3lNd2F5a1ZMOEZXdXNKcHA='

Results in the following response:

<?xml version="1.0" encoding="UTF-8"?>
<metadata modelVersion="1.1.0">
    <groupId>org.jfrog.cardinalcommerce.gradle</groupId>
    <artifactId>cardinalmobilesdk</artifactId>
    <version>2.2.7-5</version>
    <versioning>
        <latest>2.2.7-5</latest>
        <release>2.2.7-5</release>
        <versions>
            <version>2.2.7-3</version>
            <version>2.2.7-4</version>
            <version>2.2.7-5</version>
        </versions>
        <lastUpdated>20240403134935</lastUpdated>
    </versioning>
</metadata>

A temporary workaround was to exclude the problematic package from com.paypal.checkout:android-sdk:1.3.0 and specify a different version of the Cardinal SDK. ie.

dependencies {
...
    implementation('com.paypal.checkout:android-sdk:1.3.0') {
        exclude group: 'org.jfrog.cardinalcommerce.gradle', module: 'cardinalmobilesdk'
    }
    implementation('org.jfrog.cardinalcommerce.gradle:cardinalmobilesdk:2.2.7-5')
...
}

[github-actions]

Thank you for reaching out to the Native Checkout SDK team. This integration path is now inactive for new merchants.
If you are an existing merchant, please contact us here for further assistance.

New merchants can integrate the Native Checkout experience via the Braintree Android SDK or PayPal Android SDK.
For more information please see their respective developer documentation linked below.

• Braintree Android SDK
• PayPal Android SDK

[sforsberg]

Closing this as the issue has been resolved.