There was work to abstract git's hashids from being SHA1 (or at the very least, uint8_t[20]) - does anyone know what's going on with that? SHA1 is still useful

There was work to abstract git's hashids from being SHA1 (or at the very least, uint8_t[20]) - does anyone know what's going on with that? SHA1 is still useful against preimage attacks (which is mostly what git is about), but freestart collisions are already known, and standard collisions are expected within the next two months - so git is no longer secure against a malicious committer.