Skip to content

CFE-3725: hash=>"best" resolves to SHA-512 (community)#3742

Open
nickanderson wants to merge 1 commit into
cfengine:masterfrom
nickanderson:CFE-3725/master
Open

CFE-3725: hash=>"best" resolves to SHA-512 (community)#3742
nickanderson wants to merge 1 commit into
cfengine:masterfrom
nickanderson:CFE-3725/master

Conversation

@nickanderson

Copy link
Copy Markdown
Member

Summary

Companion to cfengine/core#6241.

hash => "best" now resolves to a single SHA-512 instead of cross-correlating MD5 and SHA1. This updates the changes body hash attribute reference:

  • Description: "cross correlates the best two available algorithms known in the OpenSSL library" → "uses the strongest hash algorithm available (SHA-512)."
  • Adds a History note: the change landed in 3.29.0 and affects the community edition only (the enterprise edition already used SHA-512). Files tracked with hash => "best" are silently re-baselined under the new hash on the first agent run after upgrade.

🤖 Generated with Claude Code

Community "best" now resolves to a single SHA-512 instead of cross-correlating
MD5 and SHA1. Update the `hash` attribute description and add a History note.
Enterprise already used SHA-512, so this only affects the community edition.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@cf-bottom

Copy link
Copy Markdown

Thanks for submitting a PR! Maybe @craigcomstock can review this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants