From b74e4ea7f018cd4230ed59ca1faf3d2cfdec8015 Mon Sep 17 00:00:00 2001
From: John Smith <you@example.com>
Date: Sat, 25 Jul 2026 15:52:39 -0400
Subject: [PATCH] fix(server): replace MD5 with SHA-256 in FsHashStore

SonarCloud S4790: weak hash algorithm. SHA-256 is content
fingerprint only (not security) but S4790 flags any MD5 use.
---
 server/server/internal/objects/fsBackend.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/server/internal/objects/fsBackend.ts b/server/server/internal/objects/fsBackend.ts
index 99e214aa..80875fe7 100644
--- a/server/server/internal/objects/fsBackend.ts
+++ b/server/server/internal/objects/fsBackend.ts
@@ -162,7 +162,7 @@ export class FsObjectBackend extends ObjectBackend {
     if (obj === undefined) return;
 
     // hash object
-    const hash = createHash("md5");
+    const hash = createHash("sha256");
     hash.setEncoding("hex");
 
     // local variable to point to object