Skip to content

CFE-3725: hash=>"best" resolves to SHA-512 (community)#3742

Merged
nickanderson merged 1 commit into
cfengine:masterfrom
nickanderson:CFE-3725/master
Jul 23, 2026
Merged

CFE-3725: hash=>"best" resolves to SHA-512 (community)#3742
nickanderson merged 1 commit into
cfengine:masterfrom
nickanderson:CFE-3725/master

Conversation

@nickanderson

Copy link
Copy Markdown
Member

Summary

Companion to cfengine/core#6241.

hash => "best" now resolves to a single SHA-512 instead of cross-correlating MD5 and SHA1. This updates the changes body hash attribute reference:

  • Description: "cross correlates the best two available algorithms known in the OpenSSL library" → "uses the strongest hash algorithm available (SHA-512)."
  • Adds a History note: the change landed in 3.29.0 and affects the community edition only (the enterprise edition already used SHA-512). Files tracked with hash => "best" are silently re-baselined under the new hash on the first agent run after upgrade.

🤖 Generated with Claude Code

Community "best" now resolves to a single SHA-512 instead of cross-correlating
MD5 and SHA1. Update the `hash` attribute description and add a History note.
Enterprise already used SHA-512, so this only affects the community edition.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@cf-bottom

Copy link
Copy Markdown

Thanks for submitting a PR! Maybe @craigcomstock can review this?

@nickanderson
nickanderson merged commit f102e6c into cfengine:master Jul 23, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants