Skip to content

fix: replace weak hash functions with SHA-256 - #329

Merged
legendecas merged 1 commit into
nodejs:mainfrom
guan404ming:fix/replace-weak-hash-functions-with-sha256
Jan 24, 2026
Merged

fix: replace weak hash functions with SHA-256#329
legendecas merged 1 commit into
nodejs:mainfrom
guan404ming:fix/replace-weak-hash-functions-with-sha256

Conversation

@guan404ming

@guan404ming guan404ming commented Jan 23, 2026

Copy link
Copy Markdown
Contributor

This PR replaces weak cryptographic hash functions (MD5 and SHA1) with SHA-256 across the node-gyp codebase to improve security. The changes affect hash generation for:

  • Object ID in Xcode project
  • Intermediate file naming in Makefile generation
  • GUID generation for VS projects
  • Build rule hashing in Ninja generator

@guan404ming

guan404ming commented Jan 23, 2026

Copy link
Copy Markdown
Contributor Author

Sorry for the late. Here is the pr @legendecas. Thanks!

@cclauss

cclauss commented Jan 23, 2026

Copy link
Copy Markdown
Contributor

ruff format pylib/gyp/generator/ninja.py

https://docs.astral.sh/ruff/formatter

@guan404ming

Copy link
Copy Markdown
Contributor Author

Updated, thanks!

@legendecas legendecas left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@guan404ming

guan404ming commented Jan 24, 2026

Copy link
Copy Markdown
Contributor Author

Thanks for the review, could we move on the pr in node-gyp after this one?

@legendecas
legendecas merged commit 958029e into nodejs:main Jan 24, 2026
46 checks passed
@guan404ming

Copy link
Copy Markdown
Contributor Author

Thanks!

@guan404ming
guan404ming deleted the fix/replace-weak-hash-functions-with-sha256 branch January 24, 2026 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants