> All that is left is the hard work of making the transition to a new hash easy for users — what could be thought of as "the other 90%" of the job. If that was

> All that is left is the hard work of making the transition to a new hash easy for users — what could be thought of as "the other 90%" of the job. If that was all that was left, we could at least be using sha256 for new repositories. It seems to me the big missing piece is support in libgit2, which is at least showing signs of progress: https://github.com/libgit2/libgit2/pull/6191 https://github.com/libgit2/libgit2/pull/6191